Overview

overview

10

Static

static

53a96e66d5...d9.exe

windows7-x64

10

53a96e66d5...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53a96e66d55b55c3da544f192de6ab47d3194ad878d75c9d820b83566703c8d9

  • Size

    473KB

  • Sample

    220727-a2g47sbff9

  • MD5

    0239df7d47b8002859f89f32d57a1192

  • SHA1

    fb32675eb631aaee30a0c64df192e3230451409e

  • SHA256

    53a96e66d55b55c3da544f192de6ab47d3194ad878d75c9d820b83566703c8d9

  • SHA512

    c67138045eec71164f5f79f3244a7576963ef1b19270870d7a98a2c9342165f65670a17327c6a1754b6665765950a75a9c1ebf708af3eed09ddf8e47b4fbba8c

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      53a96e66d55b55c3da544f192de6ab47d3194ad878d75c9d820b83566703c8d9

    • Size

      473KB

    • MD5

      0239df7d47b8002859f89f32d57a1192

    • SHA1

      fb32675eb631aaee30a0c64df192e3230451409e

    • SHA256

      53a96e66d55b55c3da544f192de6ab47d3194ad878d75c9d820b83566703c8d9

    • SHA512

      c67138045eec71164f5f79f3244a7576963ef1b19270870d7a98a2c9342165f65670a17327c6a1754b6665765950a75a9c1ebf708af3eed09ddf8e47b4fbba8c

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Drops startup file

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks