Overview

overview

10

Static

static

aa7eaf620a...78.exe

windows7-x64

10

aa7eaf620a...78.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa7eaf620a5279ea0647a47b6714f20a23b1f7f012f5bcd3e669a06ae3f88678

  • Size

    547KB

  • Sample

    221108-cwp9qscde8

  • MD5

    8ebccf136c729cb2452aab434e7db032

  • SHA1

    806c2509b15e73f3d63e80e12e3dfb819b3134b3

  • SHA256

    aa7eaf620a5279ea0647a47b6714f20a23b1f7f012f5bcd3e669a06ae3f88678

  • SHA512

    5a6471bdd62127a6267501771291634c9a8d1b71d878940b2395171e21b1e50d71084d85ca11c0f60153c72d6e4535d98042da272c061853831d2337733991f2

  • SSDEEP

    12288:5y7DFR9KwHS+MAS/mia328abWmSqHMQFwwZ6RYRW6d:5y7DFR9KwHS+MAS/mic282WPq3FP6RY8

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      aa7eaf620a5279ea0647a47b6714f20a23b1f7f012f5bcd3e669a06ae3f88678

    • Size

      547KB

    • MD5

      8ebccf136c729cb2452aab434e7db032

    • SHA1

      806c2509b15e73f3d63e80e12e3dfb819b3134b3

    • SHA256

      aa7eaf620a5279ea0647a47b6714f20a23b1f7f012f5bcd3e669a06ae3f88678

    • SHA512

      5a6471bdd62127a6267501771291634c9a8d1b71d878940b2395171e21b1e50d71084d85ca11c0f60153c72d6e4535d98042da272c061853831d2337733991f2

    • SSDEEP

      12288:5y7DFR9KwHS+MAS/mia328abWmSqHMQFwwZ6RYRW6d:5y7DFR9KwHS+MAS/mic282WPq3FP6RY8

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks