Overview

overview

10

Static

static

e34b20ba4d...fb.exe

windows7-x64

10

e34b20ba4d...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e34b20ba4dcb923b68660529ab9a071211b73466bae90d4ec2ad438daf7a26fb

  • Size

    772KB

  • Sample

    221123-s3wcbsch88

  • MD5

    7ca43d6276ac5ad12d9f8000f8c07e3e

  • SHA1

    19ff25f1ed8d55bc424b17bb3328eee934804303

  • SHA256

    e34b20ba4dcb923b68660529ab9a071211b73466bae90d4ec2ad438daf7a26fb

  • SHA512

    9010976aff6a2801fe22fa9f015a98c6badedb024a60365db79f07b2f6d9aacb74bdde0aed0e4e95cb201a7f84272e2a758fb4abec717611a409d0ae44c2b29d

  • SSDEEP

    12288:xq+O7Rjj7OPQbUQJlnXeSFGCu3H2Jz5tUwfBR52sm2p9kF:xJqHbJ1eSFaydtUwZRYC

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      e34b20ba4dcb923b68660529ab9a071211b73466bae90d4ec2ad438daf7a26fb

    • Size

      772KB

    • MD5

      7ca43d6276ac5ad12d9f8000f8c07e3e

    • SHA1

      19ff25f1ed8d55bc424b17bb3328eee934804303

    • SHA256

      e34b20ba4dcb923b68660529ab9a071211b73466bae90d4ec2ad438daf7a26fb

    • SHA512

      9010976aff6a2801fe22fa9f015a98c6badedb024a60365db79f07b2f6d9aacb74bdde0aed0e4e95cb201a7f84272e2a758fb4abec717611a409d0ae44c2b29d

    • SSDEEP

      12288:xq+O7Rjj7OPQbUQJlnXeSFGCu3H2Jz5tUwfBR52sm2p9kF:xJqHbJ1eSFaydtUwZRYC

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks