General

  • Target

    0f74dc99cca7e60bb225d693d33ac7c4b476064ef38e9e1be977aff4b5d6b37e

  • Size

    268KB

  • Sample

    221014-kv898agda7

  • MD5

    42fc6efb3d9565cb61a9c1ecede1c1c0

  • SHA1

    749176180feed8881021e14943e79a725adc6064

  • SHA256

    0f74dc99cca7e60bb225d693d33ac7c4b476064ef38e9e1be977aff4b5d6b37e

  • SHA512

    cb291881e266ad50a235982e6ee01ec0fa9580c4334274c85a25ffc4b979e1c244c57acdcba687fa50a5dfbe392b5d3e66f497b4a321cef9fde97205b27ef6c3

  • SSDEEP

    6144:Wi8Jd4clrqL9v/0MHwmAff8siDfPq553wgz2CiTzsI2kj8:P2DqJv/0ttX8/LP0AacT9S

Malware Config

Targets

    • Target

      0f74dc99cca7e60bb225d693d33ac7c4b476064ef38e9e1be977aff4b5d6b37e

    • Size

      268KB

    • MD5

      42fc6efb3d9565cb61a9c1ecede1c1c0

    • SHA1

      749176180feed8881021e14943e79a725adc6064

    • SHA256

      0f74dc99cca7e60bb225d693d33ac7c4b476064ef38e9e1be977aff4b5d6b37e

    • SHA512

      cb291881e266ad50a235982e6ee01ec0fa9580c4334274c85a25ffc4b979e1c244c57acdcba687fa50a5dfbe392b5d3e66f497b4a321cef9fde97205b27ef6c3

    • SSDEEP

      6144:Wi8Jd4clrqL9v/0MHwmAff8siDfPq553wgz2CiTzsI2kj8:P2DqJv/0ttX8/LP0AacT9S

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks