Overview

overview

10

Static

static

5ef049d767...57.exe

windows7-x64

10

5ef049d767...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ef049d767e1e38d1ff7dc339b8f962d880ab684396aac8e5e7797a2b6939c57

  • Size

    723KB

  • Sample

    220731-xeje3sbgb8

  • MD5

    e9e6541b43dcab620ddd1f9e4103e941

  • SHA1

    cadbddde45f268fca1b6523d21d7e07c85e225ab

  • SHA256

    5ef049d767e1e38d1ff7dc339b8f962d880ab684396aac8e5e7797a2b6939c57

  • SHA512

    c9b9bfcc86c87246774ae6c84a34e3c5b9ba885827c06de186d883dfd94433a5c9fa2c6c97396d30d94bb3298e322a80ad18468cb95480a093b6abe6379ab93d

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      5ef049d767e1e38d1ff7dc339b8f962d880ab684396aac8e5e7797a2b6939c57

    • Size

      723KB

    • MD5

      e9e6541b43dcab620ddd1f9e4103e941

    • SHA1

      cadbddde45f268fca1b6523d21d7e07c85e225ab

    • SHA256

      5ef049d767e1e38d1ff7dc339b8f962d880ab684396aac8e5e7797a2b6939c57

    • SHA512

      c9b9bfcc86c87246774ae6c84a34e3c5b9ba885827c06de186d883dfd94433a5c9fa2c6c97396d30d94bb3298e322a80ad18468cb95480a093b6abe6379ab93d

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks