General

  • Target

    21009d1d58d264c9f4d4027c7a6a9d4d90c9dc713f17383cc1b972805b081483

  • Size

    410KB

  • Sample

    221121-3ememaeg9t

  • MD5

    eecb6845038a851ebc07a07ba2adf421

  • SHA1

    4b37c4391e426afe271b90001483ec07a8265f7e

  • SHA256

    21009d1d58d264c9f4d4027c7a6a9d4d90c9dc713f17383cc1b972805b081483

  • SHA512

    51f470e3c6e2398eaf12d9d04286b0ee2370ae89da2be85a9febb914cb419375912f1d0f098e4759d1664412aee1f982234c52002ef29b8d467172a65fc03c9b

  • SSDEEP

    6144:FhykAhNGYWUJPGK0CYJcxbBse26TvgzgGlHx2aAs46B9rdRxccu:Fg3447vYJcNe6kUwAs4ChbxBu

Malware Config

Targets

    • Target

      21009d1d58d264c9f4d4027c7a6a9d4d90c9dc713f17383cc1b972805b081483

    • Size

      410KB

    • MD5

      eecb6845038a851ebc07a07ba2adf421

    • SHA1

      4b37c4391e426afe271b90001483ec07a8265f7e

    • SHA256

      21009d1d58d264c9f4d4027c7a6a9d4d90c9dc713f17383cc1b972805b081483

    • SHA512

      51f470e3c6e2398eaf12d9d04286b0ee2370ae89da2be85a9febb914cb419375912f1d0f098e4759d1664412aee1f982234c52002ef29b8d467172a65fc03c9b

    • SSDEEP

      6144:FhykAhNGYWUJPGK0CYJcxbBse26TvgzgGlHx2aAs46B9rdRxccu:Fg3447vYJcNe6kUwAs4ChbxBu

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks