Overview

overview

10

Static

static

MT18938787...MG.exe

windows7-x64

10

MT18938787...MG.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MT1893878746.PDF.IMG.exe

  • Size

    1.2MB

  • Sample

    220919-csyfyagcak

  • MD5

    b7babb9f64a9ecd894d100ce02f132fe

  • SHA1

    8fa93c638d331f51ec638655d82ec431fdae3f6a

  • SHA256

    fee7bc7eff7adf5192824e245be39b703275f67cc6be520fd8adf157ce221934

  • SHA512

    8bc04fc8c754acef111aa8d68885293be136ba387a925facadf7a19c423c3cd94105eac3676669b7c280076321add5a4ae080db56be272cb28b933f06c307743

  • SSDEEP

    12288:4v+bQYpRi8N69+d0qKu3rXbSIVfqNZSM1fpJwNDxGVwef3G1oMfqzpcfu2E:bpRbi+d0qPVGZTFfLweO1oMSzpKE

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      MT1893878746.PDF.IMG.exe

    • Size

      1.2MB

    • MD5

      b7babb9f64a9ecd894d100ce02f132fe

    • SHA1

      8fa93c638d331f51ec638655d82ec431fdae3f6a

    • SHA256

      fee7bc7eff7adf5192824e245be39b703275f67cc6be520fd8adf157ce221934

    • SHA512

      8bc04fc8c754acef111aa8d68885293be136ba387a925facadf7a19c423c3cd94105eac3676669b7c280076321add5a4ae080db56be272cb28b933f06c307743

    • SSDEEP

      12288:4v+bQYpRi8N69+d0qKu3rXbSIVfqNZSM1fpJwNDxGVwef3G1oMfqzpcfu2E:bpRbi+d0qPVGZTFfLweO1oMSzpKE

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks