Overview

overview

10

Static

static

Trojan-Ran...er.exe

windows7-x64

10

Trojan-Ran...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan-Ransom.Win32.Blocker.gavp-68dcf9e4e09e3b9539e7b1183a67350b3545c72823c5b6a43b01f4b03f9603e7

  • Size

    357KB

  • Sample

    221106-16hveadga6

  • MD5

    7db1c8d860839f26a08c97edbb683ccd

  • SHA1

    1cf385561a68fb7ab2a32f774208cd2980fc7a56

  • SHA256

    68dcf9e4e09e3b9539e7b1183a67350b3545c72823c5b6a43b01f4b03f9603e7

  • SHA512

    b188556b05c2baf0cf89e763208a7a6630af236f515c2399fa691e19e33544b4c0b031df72cd5717a5533eec4ea056c542afa33431dbdc0bd8b09b344b558168

  • SSDEEP

    6144:h88kzX/WtCaxpi+15MD32VUmxdqNGQrulT6WAfjeXMNJbVqXZgrulky:Sjetdpi+1ompKGWPz7XXbVgZgr9

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      Trojan-Ransom.Win32.Blocker.gavp-68dcf9e4e09e3b9539e7b1183a67350b3545c72823c5b6a43b01f4b03f9603e7

    • Size

      357KB

    • MD5

      7db1c8d860839f26a08c97edbb683ccd

    • SHA1

      1cf385561a68fb7ab2a32f774208cd2980fc7a56

    • SHA256

      68dcf9e4e09e3b9539e7b1183a67350b3545c72823c5b6a43b01f4b03f9603e7

    • SHA512

      b188556b05c2baf0cf89e763208a7a6630af236f515c2399fa691e19e33544b4c0b031df72cd5717a5533eec4ea056c542afa33431dbdc0bd8b09b344b558168

    • SSDEEP

      6144:h88kzX/WtCaxpi+15MD32VUmxdqNGQrulT6WAfjeXMNJbVqXZgrulky:Sjetdpi+1ompKGWPz7XXbVgZgr9

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks