Overview

overview

10

Static

static

f3a965324d...cd.exe

windows7-x64

1

f3a965324d...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3a965324d2b610859a4deeee2cbe8ad6a68a82e2509235b8844a740cb3c52cd

  • Size

    403KB

  • Sample

    221029-ezphqabggj

  • MD5

    4c1d7684753403b29a4ed286d3f66853

  • SHA1

    1c340c62f0ab6829f8be42233b952354c160a591

  • SHA256

    f3a965324d2b610859a4deeee2cbe8ad6a68a82e2509235b8844a740cb3c52cd

  • SHA512

    862c3cc49cf3fc193ff16f5ef456f67116b98c199ca1821d4337d9254883fb45a0bff61e0270fc0d5385b962ec3574415eec82e7067c4fe2e97051f011cb73a0

  • SSDEEP

    12288:cVlAkeLH0YVc7XS0h62zYs1yBVdjlrvx7FaYke:cVlAvVcdhPzcFl1pf

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      f3a965324d2b610859a4deeee2cbe8ad6a68a82e2509235b8844a740cb3c52cd

    • Size

      403KB

    • MD5

      4c1d7684753403b29a4ed286d3f66853

    • SHA1

      1c340c62f0ab6829f8be42233b952354c160a591

    • SHA256

      f3a965324d2b610859a4deeee2cbe8ad6a68a82e2509235b8844a740cb3c52cd

    • SHA512

      862c3cc49cf3fc193ff16f5ef456f67116b98c199ca1821d4337d9254883fb45a0bff61e0270fc0d5385b962ec3574415eec82e7067c4fe2e97051f011cb73a0

    • SSDEEP

      12288:cVlAkeLH0YVc7XS0h62zYs1yBVdjlrvx7FaYke:cVlAvVcdhPzcFl1pf

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks