Overview

overview

10

Static

static

5d565fb045...1a.exe

windows7-x64

10

5d565fb045...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d565fb045b217f3de803f67883d3a3200488073440138f47d97b1767ea4981a

  • Size

    321KB

  • Sample

    220731-3vjcxadeg6

  • MD5

    fe68a016b5c819601765317d4abf1cee

  • SHA1

    2fb8ff8c27498fe3954fa8ce77b13402763c5949

  • SHA256

    5d565fb045b217f3de803f67883d3a3200488073440138f47d97b1767ea4981a

  • SHA512

    3aae9a2066e88d46d5ecaef676f836425a7743fdea78660e97fc62ab70eb86cffa2ba9cb967304acd68e13bcd708f4f82a04fde90e02c9318d80c10a4dc3226e

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      5d565fb045b217f3de803f67883d3a3200488073440138f47d97b1767ea4981a

    • Size

      321KB

    • MD5

      fe68a016b5c819601765317d4abf1cee

    • SHA1

      2fb8ff8c27498fe3954fa8ce77b13402763c5949

    • SHA256

      5d565fb045b217f3de803f67883d3a3200488073440138f47d97b1767ea4981a

    • SHA512

      3aae9a2066e88d46d5ecaef676f836425a7743fdea78660e97fc62ab70eb86cffa2ba9cb967304acd68e13bcd708f4f82a04fde90e02c9318d80c10a4dc3226e

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks