Overview

overview

10

Static

static

454e3fb818...71.exe

windows7-x64

10

454e3fb818...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    454e3fb8186f13a27e1631d43a05601f874ba564cc166b26da5bf262d4cc7171

  • Size

    359KB

  • Sample

    221126-xt26qsbe51

  • MD5

    937ad89b4cea63b8b653c002477ea072

  • SHA1

    8f45173fd54d56b14f17e78bbe46eac49b4ac620

  • SHA256

    454e3fb8186f13a27e1631d43a05601f874ba564cc166b26da5bf262d4cc7171

  • SHA512

    00424bf6f528fb41ce20ca664f71ae9da9c7c2d23c0dd3856bbd4d4f65e25806aba74cc596aff387d645d7b87ac4b39674df19a3a977c75844b539940ec0f93a

  • SSDEEP

    6144:/gg90DkFQMJR6gYZOLSwCVLeyeFuvaa39zljc7mPkpO8HKkOWZyVC/X5CpI4iPer:ZQfgYGSwtYvFDwwWwePer

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      454e3fb8186f13a27e1631d43a05601f874ba564cc166b26da5bf262d4cc7171

    • Size

      359KB

    • MD5

      937ad89b4cea63b8b653c002477ea072

    • SHA1

      8f45173fd54d56b14f17e78bbe46eac49b4ac620

    • SHA256

      454e3fb8186f13a27e1631d43a05601f874ba564cc166b26da5bf262d4cc7171

    • SHA512

      00424bf6f528fb41ce20ca664f71ae9da9c7c2d23c0dd3856bbd4d4f65e25806aba74cc596aff387d645d7b87ac4b39674df19a3a977c75844b539940ec0f93a

    • SSDEEP

      6144:/gg90DkFQMJR6gYZOLSwCVLeyeFuvaa39zljc7mPkpO8HKkOWZyVC/X5CpI4iPer:ZQfgYGSwtYvFDwwWwePer

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks