Overview

overview

10

Static

static

e7c90a88de...29.exe

windows7-x64

10

e7c90a88de...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7c90a88de446654da0f5506f2b7590d9816095a864fe12e7997909d576e8229

  • Size

    292KB

  • Sample

    221029-px53ssfhd6

  • MD5

    4214abf5fd8ede6d3d9d03b9f55713f5

  • SHA1

    a2360c5577a67315fa5782f35c3bf97dc24089e9

  • SHA256

    e7c90a88de446654da0f5506f2b7590d9816095a864fe12e7997909d576e8229

  • SHA512

    2c96cd0b65e350233459617b6a15b91142b08dce328b1f04d895c40701f3a57d0212c0554c60c57d1b6585dc973986ef58fd0832e05d313ddbd42263c875fe8a

  • SSDEEP

    6144:/CXnomEpWJmo2+gu5KFOPO3pZSytbAH0WJ0IgMbDMRlsQpOm:mofpWJmo2vuIeOZZSobAH0ZIx6CQpOm

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      e7c90a88de446654da0f5506f2b7590d9816095a864fe12e7997909d576e8229

    • Size

      292KB

    • MD5

      4214abf5fd8ede6d3d9d03b9f55713f5

    • SHA1

      a2360c5577a67315fa5782f35c3bf97dc24089e9

    • SHA256

      e7c90a88de446654da0f5506f2b7590d9816095a864fe12e7997909d576e8229

    • SHA512

      2c96cd0b65e350233459617b6a15b91142b08dce328b1f04d895c40701f3a57d0212c0554c60c57d1b6585dc973986ef58fd0832e05d313ddbd42263c875fe8a

    • SSDEEP

      6144:/CXnomEpWJmo2+gu5KFOPO3pZSytbAH0WJ0IgMbDMRlsQpOm:mofpWJmo2vuIeOZZSobAH0ZIx6CQpOm

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks