General

  • Target

    5a8fc9009eb0736d835ee5223ea98cb964d4798147aee07dc60b9bffd1ed710b

  • Size

    321KB

  • Sample

    220802-dmr8eahfek

  • MD5

    b3dfddeb4e98e313447abeba696138a9

  • SHA1

    e896f357b169a6fcab180aa5c7ed2ef05b21fd0c

  • SHA256

    5a8fc9009eb0736d835ee5223ea98cb964d4798147aee07dc60b9bffd1ed710b

  • SHA512

    7a2db2991c2fd31c40b1c4406532a8eefae777525e3a4cb28815bf29b5f3a0f3fbe17cc433c065c7b31a8f7f74d55c592841e48bc8e81999a3ada18a17e8c76d

Score
10/10

Malware Config

Targets

    • Target

      5a8fc9009eb0736d835ee5223ea98cb964d4798147aee07dc60b9bffd1ed710b

    • Size

      321KB

    • MD5

      b3dfddeb4e98e313447abeba696138a9

    • SHA1

      e896f357b169a6fcab180aa5c7ed2ef05b21fd0c

    • SHA256

      5a8fc9009eb0736d835ee5223ea98cb964d4798147aee07dc60b9bffd1ed710b

    • SHA512

      7a2db2991c2fd31c40b1c4406532a8eefae777525e3a4cb28815bf29b5f3a0f3fbe17cc433c065c7b31a8f7f74d55c592841e48bc8e81999a3ada18a17e8c76d

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks