Analysis
-
max time kernel
178s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 12:41
General
-
Target
f5d08bf42d6c3dc868fe5ca0f8fc77592e8310e43e799347b35ac185caf3926b.exe
-
Size
272KB
-
MD5
e20ce1162c178b5822f7802e1fe4c707
-
SHA1
5045f746d64010d6714c8e27efe64f7b372dc17a
-
SHA256
f5d08bf42d6c3dc868fe5ca0f8fc77592e8310e43e799347b35ac185caf3926b
-
SHA512
eb250c1a60b24ea272f7340853cf2df7eacf77a08bd16b1b26fb51db169a9484f34449c61cf98f7e6ed13ddac33e9c946e9b5325f61a1f0b9201b1f208441197
-
SSDEEP
6144:z617TqZkoLkmtciac+6GEcwTxe6JdfkctlRn:6YPZVt+6ZHzgIt
Score
10/10
Malware Config
Signatures
-
Imminent RAT
Remote-access trojan based on Imminent Monitor remote admin software.
-
Drops desktop.ini file(s) 2 IoCs
-
Drops file in Windows directory 3 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5d08bf42d6c3dc868fe5ca0f8fc77592e8310e43e799347b35ac185caf3926b.exe"C:\Users\Admin\AppData\Local\Temp\f5d08bf42d6c3dc868fe5ca0f8fc77592e8310e43e799347b35ac185caf3926b.exe"1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.7MB