Overview

overview

10

Static

static

5

2003b41d39...ad.exe

windows7-x64

10

2003b41d39...ad.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2003b41d396293722009f303f1a053c8acaa84a2d62a0ec122ad1c5c2cfca6ad

  • Size

    1.1MB

  • Sample

    221021-yqp8fadbc9

  • MD5

    bd4f303f26b9501c1a8ca897aadb7809

  • SHA1

    bcca6d9b94a7b23cfb3465393806f5917b4f98c9

  • SHA256

    2003b41d396293722009f303f1a053c8acaa84a2d62a0ec122ad1c5c2cfca6ad

  • SHA512

    d962f8bb9b3dc3857657bc1103d55474552877d61081b46210a6014b9e2e79b8db6d128e2d97d97ca80cd1fccd6097cf3c1586e0e6ef4a70c408890cbddd5ab3

  • SSDEEP

    24576:Itb20pk5CqT5TBWgNQ7aOppjWr3j9ecdHrdeQ6A:Rkg5tQ7aOfaBPBdb5

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      2003b41d396293722009f303f1a053c8acaa84a2d62a0ec122ad1c5c2cfca6ad

    • Size

      1.1MB

    • MD5

      bd4f303f26b9501c1a8ca897aadb7809

    • SHA1

      bcca6d9b94a7b23cfb3465393806f5917b4f98c9

    • SHA256

      2003b41d396293722009f303f1a053c8acaa84a2d62a0ec122ad1c5c2cfca6ad

    • SHA512

      d962f8bb9b3dc3857657bc1103d55474552877d61081b46210a6014b9e2e79b8db6d128e2d97d97ca80cd1fccd6097cf3c1586e0e6ef4a70c408890cbddd5ab3

    • SSDEEP

      24576:Itb20pk5CqT5TBWgNQ7aOppjWr3j9ecdHrdeQ6A:Rkg5tQ7aOfaBPBdb5

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks