Overview

overview

10

Static

static

fd7f3b1b7d...55.exe

windows7-x64

10

fd7f3b1b7d...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd7f3b1b7d1fc00208435faac2bc1b4601a46975af97a647f86e5888a75f6555

  • Size

    453KB

  • Sample

    221123-ps33msfc7z

  • MD5

    c34d23438f8ce0b7a784213bbcd4d5d7

  • SHA1

    0765a0299677199ea519545c8d48657dbe2ae4c0

  • SHA256

    fd7f3b1b7d1fc00208435faac2bc1b4601a46975af97a647f86e5888a75f6555

  • SHA512

    9c8d5f1848bf1b5e815c007e28b530144c916a6e3e3657ced213ec33ef8383d77db6367258b0d74ef5d6ebccfc8f7c507c3ec56f02db564daeee345635552165

  • SSDEEP

    6144:5zoTXwL+qUxYYOKJ1VzoEYrM2zxa03DrGsPPuRfiFv7VJG3/JnDHGcM:Y6yxY3KdoEyFWsPWRKFvhJG3/9D

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      fd7f3b1b7d1fc00208435faac2bc1b4601a46975af97a647f86e5888a75f6555

    • Size

      453KB

    • MD5

      c34d23438f8ce0b7a784213bbcd4d5d7

    • SHA1

      0765a0299677199ea519545c8d48657dbe2ae4c0

    • SHA256

      fd7f3b1b7d1fc00208435faac2bc1b4601a46975af97a647f86e5888a75f6555

    • SHA512

      9c8d5f1848bf1b5e815c007e28b530144c916a6e3e3657ced213ec33ef8383d77db6367258b0d74ef5d6ebccfc8f7c507c3ec56f02db564daeee345635552165

    • SSDEEP

      6144:5zoTXwL+qUxYYOKJ1VzoEYrM2zxa03DrGsPPuRfiFv7VJG3/JnDHGcM:Y6yxY3KdoEyFWsPWRKFvhJG3/9D

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks