General

  • Target

    f784e6c5a6a6f034a51bd4d069752bd569e016a1d0a5fdbde8546ede0d4c7724

  • Size

    3.8MB

  • Sample

    221029-hhs2csfcem

  • MD5

    6de25756f2fa6198480b69594c7abec7

  • SHA1

    21e99a9e96a23999584e6a11289a5b625231e249

  • SHA256

    f784e6c5a6a6f034a51bd4d069752bd569e016a1d0a5fdbde8546ede0d4c7724

  • SHA512

    b257c7cef887bb22ead07abfed562ecae4145b53123910a231eedad5a78035cd2606f753fe507d9a6f3c24363852833906eda93e8bc88e365879c7ae1c1b110c

  • SSDEEP

    98304:QbY+W1mwQyEWxzhersAVkPOhHqobKQV+bY0:jf1gy3hzAKPCKo7P

Malware Config

Targets

    • Target

      f784e6c5a6a6f034a51bd4d069752bd569e016a1d0a5fdbde8546ede0d4c7724

    • Size

      3.8MB

    • MD5

      6de25756f2fa6198480b69594c7abec7

    • SHA1

      21e99a9e96a23999584e6a11289a5b625231e249

    • SHA256

      f784e6c5a6a6f034a51bd4d069752bd569e016a1d0a5fdbde8546ede0d4c7724

    • SHA512

      b257c7cef887bb22ead07abfed562ecae4145b53123910a231eedad5a78035cd2606f753fe507d9a6f3c24363852833906eda93e8bc88e365879c7ae1c1b110c

    • SSDEEP

      98304:QbY+W1mwQyEWxzhersAVkPOhHqobKQV+bY0:jf1gy3hzAKPCKo7P

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks