General

  • Target

    a65d51b98a09b48cd3a217a370de9492ad121db019786a37487449f1830a3231

  • Size

    580KB

  • Sample

    221029-bmcfvaege6

  • MD5

    f121fe09017c12ca9ba6326f34d1b754

  • SHA1

    5630e45ca277fb15fd72e0f36ffa05106f9a1052

  • SHA256

    a65d51b98a09b48cd3a217a370de9492ad121db019786a37487449f1830a3231

  • SHA512

    71d0510d0279d24449fdb535791448ac4d6fb0a5cf4e408bbbe8cd26fa478935740d162ca7198f882596be24a162223eaafaf64acb3ab120f2f8a3b428068c3e

  • SSDEEP

    6144:wS5PHFrOHoZN78DJ6YCesUXs92Azje78RpD4PjneMKYgFywwj/H8naDo/JnJ+5:wS5RZN+J6YCeQIAzfRh4exswwgV

Score
10/10

Malware Config

Targets

    • Target

      a65d51b98a09b48cd3a217a370de9492ad121db019786a37487449f1830a3231

    • Size

      580KB

    • MD5

      f121fe09017c12ca9ba6326f34d1b754

    • SHA1

      5630e45ca277fb15fd72e0f36ffa05106f9a1052

    • SHA256

      a65d51b98a09b48cd3a217a370de9492ad121db019786a37487449f1830a3231

    • SHA512

      71d0510d0279d24449fdb535791448ac4d6fb0a5cf4e408bbbe8cd26fa478935740d162ca7198f882596be24a162223eaafaf64acb3ab120f2f8a3b428068c3e

    • SSDEEP

      6144:wS5PHFrOHoZN78DJ6YCesUXs92Azje78RpD4PjneMKYgFywwj/H8naDo/JnJ+5:wS5RZN+J6YCeQIAzfRh4exswwgV

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks