Overview

overview

10

Static

static

5

a9cb0c3daa...10.exe

windows7-x64

10

a9cb0c3daa...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9cb0c3daa76692b5d51922a99386ecd97402b93f5e8c5ad3d26a16094d18810

  • Size

    1.1MB

  • Sample

    221107-r1zrascac7

  • MD5

    080544b06deb5bd009cf94e1898b8a90

  • SHA1

    307c1c94203da71adda98b4398b7e5ff44458bf2

  • SHA256

    a9cb0c3daa76692b5d51922a99386ecd97402b93f5e8c5ad3d26a16094d18810

  • SHA512

    1bc5a9ab9ce81fc645e73a86359c6e31ec24ced18f1ca2baa23753dedc652cbae251869f420299f83bb633b29c827588772dc1a1e7df586ebf0b2e6e3f45059e

  • SSDEEP

    24576:stb20pkaCqT5TBWgNQ7a48vVI9uzdBc3z86A:VVg5tQ7a48Xzc3Y5

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      a9cb0c3daa76692b5d51922a99386ecd97402b93f5e8c5ad3d26a16094d18810

    • Size

      1.1MB

    • MD5

      080544b06deb5bd009cf94e1898b8a90

    • SHA1

      307c1c94203da71adda98b4398b7e5ff44458bf2

    • SHA256

      a9cb0c3daa76692b5d51922a99386ecd97402b93f5e8c5ad3d26a16094d18810

    • SHA512

      1bc5a9ab9ce81fc645e73a86359c6e31ec24ced18f1ca2baa23753dedc652cbae251869f420299f83bb633b29c827588772dc1a1e7df586ebf0b2e6e3f45059e

    • SSDEEP

      24576:stb20pkaCqT5TBWgNQ7a48vVI9uzdBc3z86A:VVg5tQ7a48Xzc3Y5

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks