General

  • Target

    db65a66d40aa2816a1af0e7ac17e3d72f3972eaa80af428706c466b53b11a77f

  • Size

    273KB

  • Sample

    221124-wyl5msbd87

  • MD5

    b8dd1f50dfd715ddc312a937a9e2aee6

  • SHA1

    2a57144680d6aa461d0e99f33f94399fea18544f

  • SHA256

    db65a66d40aa2816a1af0e7ac17e3d72f3972eaa80af428706c466b53b11a77f

  • SHA512

    d4c910b0ac29118e1434733cf44c7546e258e67db67dd0505151ffc4dc029ce685e97360744bb34b8e47d425e42b87f4512dc570863a88fd56c08daf527f449d

  • SSDEEP

    6144:u/YNWb11UjirywygEQgbihMBy2Uof/Txctls:uhbsjimtfQsm+yZMxIs

Malware Config

Targets

    • Target

      db65a66d40aa2816a1af0e7ac17e3d72f3972eaa80af428706c466b53b11a77f

    • Size

      273KB

    • MD5

      b8dd1f50dfd715ddc312a937a9e2aee6

    • SHA1

      2a57144680d6aa461d0e99f33f94399fea18544f

    • SHA256

      db65a66d40aa2816a1af0e7ac17e3d72f3972eaa80af428706c466b53b11a77f

    • SHA512

      d4c910b0ac29118e1434733cf44c7546e258e67db67dd0505151ffc4dc029ce685e97360744bb34b8e47d425e42b87f4512dc570863a88fd56c08daf527f449d

    • SSDEEP

      6144:u/YNWb11UjirywygEQgbihMBy2Uof/Txctls:uhbsjimtfQsm+yZMxIs

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks