General

  • Target

    9f6da3708198e2274424357250b5842d627f1486373731f88d520ecd66b2275f

  • Size

    350KB

  • Sample

    221126-w89cxshg9y

  • MD5

    22a4ca0bb8c69559d1705afcfd19036e

  • SHA1

    1e5a7bd56f9c80ea45c36a15a49cd922c1a4b22b

  • SHA256

    9f6da3708198e2274424357250b5842d627f1486373731f88d520ecd66b2275f

  • SHA512

    1defcf24711937b3a078a6221189e80ea15788ca0a4274bb0da52708c7af45fb51eda68f78e98e13de189478114f3efef3361f9cc5a3a99df0888b9cb331d374

  • SSDEEP

    6144:K7NnAkDl9Rymx8mni62kJmj5SNw9IQV+REZrHfUT0+2ZXShqL:IXDlTyA8mi69JuXGQV4GHfUT0+2ZCY

Score
10/10

Malware Config

Targets

    • Target

      9f6da3708198e2274424357250b5842d627f1486373731f88d520ecd66b2275f

    • Size

      350KB

    • MD5

      22a4ca0bb8c69559d1705afcfd19036e

    • SHA1

      1e5a7bd56f9c80ea45c36a15a49cd922c1a4b22b

    • SHA256

      9f6da3708198e2274424357250b5842d627f1486373731f88d520ecd66b2275f

    • SHA512

      1defcf24711937b3a078a6221189e80ea15788ca0a4274bb0da52708c7af45fb51eda68f78e98e13de189478114f3efef3361f9cc5a3a99df0888b9cb331d374

    • SSDEEP

      6144:K7NnAkDl9Rymx8mni62kJmj5SNw9IQV+REZrHfUT0+2ZXShqL:IXDlTyA8mi69JuXGQV4GHfUT0+2ZCY

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Drops startup file

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks