Overview

overview

10

Static

static

d61ca614d6...19.exe

windows7-x64

5

d61ca614d6...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d61ca614d6cfd37f26ed1596ffa5054e6882b057a525e5d7dd7c41a068ca2019

  • Size

    4.1MB

  • Sample

    221125-yf7dzadh3y

  • MD5

    9439e74301186e03234adb19eb1e525a

  • SHA1

    cf154286505f90df48b31df60478ca1efc2a88d1

  • SHA256

    d61ca614d6cfd37f26ed1596ffa5054e6882b057a525e5d7dd7c41a068ca2019

  • SHA512

    e9925e735a8c2abec978a3591c7071e5ee7a4ccad986b721deb90843c35a770f9c62c875c1e7017e7da18d157ca54de56a775ee004ccbeb627f080427acf595a

  • SSDEEP

    98304:axky0r4chIPsiSCrQ4S4sXg0RVQhwLpNsPdbyOKgO89A:axkZ7Ib7c9dadHbO4A

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      d61ca614d6cfd37f26ed1596ffa5054e6882b057a525e5d7dd7c41a068ca2019

    • Size

      4.1MB

    • MD5

      9439e74301186e03234adb19eb1e525a

    • SHA1

      cf154286505f90df48b31df60478ca1efc2a88d1

    • SHA256

      d61ca614d6cfd37f26ed1596ffa5054e6882b057a525e5d7dd7c41a068ca2019

    • SHA512

      e9925e735a8c2abec978a3591c7071e5ee7a4ccad986b721deb90843c35a770f9c62c875c1e7017e7da18d157ca54de56a775ee004ccbeb627f080427acf595a

    • SSDEEP

      98304:axky0r4chIPsiSCrQ4S4sXg0RVQhwLpNsPdbyOKgO89A:axkZ7Ib7c9dadHbO4A

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks