General

  • Target

    f452261adf2c73deddc37ef1013a5bbda5db4cd7b22e86b669ca7acd54a2d88e

  • Size

    271KB

  • Sample

    221126-z8kw4sab6y

  • MD5

    1d7157ce34d0baa57e684f95ead52605

  • SHA1

    0484af353cf88f3eaae5c77eccdcfec869842f9c

  • SHA256

    f452261adf2c73deddc37ef1013a5bbda5db4cd7b22e86b669ca7acd54a2d88e

  • SHA512

    015f2231bed0cbfb8352dbda4ff3a1530ec93fccc77a8e562a09c70692c600c296d31b6bb68f7aebcef748e8a1db9cef1580b8366e35f90cda36ac11f1b970cc

  • SSDEEP

    6144:20SEiYbEZSPNYslw+67yVWenNFNRCbsMtun9zBPLctlU:XSEiOAoNy+IyVWQ3NelaBzIU

Score
10/10

Malware Config

Targets

    • Target

      f452261adf2c73deddc37ef1013a5bbda5db4cd7b22e86b669ca7acd54a2d88e

    • Size

      271KB

    • MD5

      1d7157ce34d0baa57e684f95ead52605

    • SHA1

      0484af353cf88f3eaae5c77eccdcfec869842f9c

    • SHA256

      f452261adf2c73deddc37ef1013a5bbda5db4cd7b22e86b669ca7acd54a2d88e

    • SHA512

      015f2231bed0cbfb8352dbda4ff3a1530ec93fccc77a8e562a09c70692c600c296d31b6bb68f7aebcef748e8a1db9cef1580b8366e35f90cda36ac11f1b970cc

    • SSDEEP

      6144:20SEiYbEZSPNYslw+67yVWenNFNRCbsMtun9zBPLctlU:XSEiOAoNy+IyVWQ3NelaBzIU

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks