Overview

overview

10

Static

static

7a13683b7a...c3.exe

windows7-x64

10

7a13683b7a...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a13683b7acf78137ac41709023de2217214e770c39266789837a65e0324dec3

  • Size

    916KB

  • Sample

    221126-ym3pcsdg9t

  • MD5

    7e01aac13f28affd9c5d1b72d50fbfed

  • SHA1

    2a6d8e4a3c28cec8043c7e4fba89bf01043eb065

  • SHA256

    7a13683b7acf78137ac41709023de2217214e770c39266789837a65e0324dec3

  • SHA512

    b5e7307962ba7ff410541e015a7fe0ca30d5b0ee3baa865a926db2c6b238e6d12891de1ac3eddd503f2e298d57edbb436bc8bb41494d145480133e8f30f848a4

  • SSDEEP

    12288:GnDs62f6fw3H5jRtuPhgsK/aex1fVnXHp1lCi6qVNb55aJ6ahco6WZN1vTwG8VsR:GnD2f/yUa8fVn3DlCt6o1R5Y

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      7a13683b7acf78137ac41709023de2217214e770c39266789837a65e0324dec3

    • Size

      916KB

    • MD5

      7e01aac13f28affd9c5d1b72d50fbfed

    • SHA1

      2a6d8e4a3c28cec8043c7e4fba89bf01043eb065

    • SHA256

      7a13683b7acf78137ac41709023de2217214e770c39266789837a65e0324dec3

    • SHA512

      b5e7307962ba7ff410541e015a7fe0ca30d5b0ee3baa865a926db2c6b238e6d12891de1ac3eddd503f2e298d57edbb436bc8bb41494d145480133e8f30f848a4

    • SSDEEP

      12288:GnDs62f6fw3H5jRtuPhgsK/aex1fVnXHp1lCi6qVNb55aJ6ahco6WZN1vTwG8VsR:GnD2f/yUa8fVn3DlCt6o1R5Y

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks