General

  • Target

    4e14806be255ef1b60bd8e3f9ea47f5f91d5801ea12e5c5b22ba8a2c5e05aee6

  • Size

    1.7MB

  • Sample

    220720-xfq7bafcd5

  • MD5

    22032a610ec48a2bc8d10d94451d9372

  • SHA1

    1603f309bf494a010fc15cfb928fb1899a6debae

  • SHA256

    4e14806be255ef1b60bd8e3f9ea47f5f91d5801ea12e5c5b22ba8a2c5e05aee6

  • SHA512

    7ad6d9e8b91cba3921ddfabaee7061525163f0b4b7dc6e8d4e228d91845a5dc5156e6e57ba28d54f483c2754dd833ffbb347da9cab75e8dd94dd1d44ef12271b

Score
10/10

Malware Config

Targets

    • Target

      4e14806be255ef1b60bd8e3f9ea47f5f91d5801ea12e5c5b22ba8a2c5e05aee6

    • Size

      1.7MB

    • MD5

      22032a610ec48a2bc8d10d94451d9372

    • SHA1

      1603f309bf494a010fc15cfb928fb1899a6debae

    • SHA256

      4e14806be255ef1b60bd8e3f9ea47f5f91d5801ea12e5c5b22ba8a2c5e05aee6

    • SHA512

      7ad6d9e8b91cba3921ddfabaee7061525163f0b4b7dc6e8d4e228d91845a5dc5156e6e57ba28d54f483c2754dd833ffbb347da9cab75e8dd94dd1d44ef12271b

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Drops startup file

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks