General

  • Target

    5ab633d4aae244aa0795e1ad0c2f342d3b48c232333a1d254052672272f75f2c

  • Size

    321KB

  • Sample

    220802-c2rpragfcl

  • MD5

    71235e186670cfb93f258d51470961d8

  • SHA1

    4757c7f00f749da3d3144a4eec1bbe38b9374c29

  • SHA256

    5ab633d4aae244aa0795e1ad0c2f342d3b48c232333a1d254052672272f75f2c

  • SHA512

    f1cd4c8d83e694407158b05ad85cb518059ba7dbfd8936f59b36f7110ad11697f6e2c62a60ddd0b22fff824b932e4d2709e53621092415d2329dae6722e15ab8

Score
10/10

Malware Config

Targets

    • Target

      5ab633d4aae244aa0795e1ad0c2f342d3b48c232333a1d254052672272f75f2c

    • Size

      321KB

    • MD5

      71235e186670cfb93f258d51470961d8

    • SHA1

      4757c7f00f749da3d3144a4eec1bbe38b9374c29

    • SHA256

      5ab633d4aae244aa0795e1ad0c2f342d3b48c232333a1d254052672272f75f2c

    • SHA512

      f1cd4c8d83e694407158b05ad85cb518059ba7dbfd8936f59b36f7110ad11697f6e2c62a60ddd0b22fff824b932e4d2709e53621092415d2329dae6722e15ab8

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks