General

  • Target

    a7f97ef92ecde26a9a3dcf78e871bf97812e2a446196d78c20c8bab940e3244e

  • Size

    272KB

  • Sample

    221127-bqbcysde41

  • MD5

    5033d53be2870fc26a18fa8d4191b6d6

  • SHA1

    bb3fa6bc3c1c81f8457ebb2ea37ee4a7d6510c39

  • SHA256

    a7f97ef92ecde26a9a3dcf78e871bf97812e2a446196d78c20c8bab940e3244e

  • SHA512

    51219ba278c27b19e29fbecd707cff8d4195dea3ef7d90863da4f071aa85dd7a7a39805bc8afc88463571aec2005b797e37b9bccea2b5122c4004c75113e47fe

  • SSDEEP

    6144:tiMgOGPmTOvhjlhyyPDkmaihrtFEgZtoydwDNTqbFGxz+Wfctle:tiBOGP6UhjlhygAUrfEgZtomwDNS+Ie

Malware Config

Targets

    • Target

      a7f97ef92ecde26a9a3dcf78e871bf97812e2a446196d78c20c8bab940e3244e

    • Size

      272KB

    • MD5

      5033d53be2870fc26a18fa8d4191b6d6

    • SHA1

      bb3fa6bc3c1c81f8457ebb2ea37ee4a7d6510c39

    • SHA256

      a7f97ef92ecde26a9a3dcf78e871bf97812e2a446196d78c20c8bab940e3244e

    • SHA512

      51219ba278c27b19e29fbecd707cff8d4195dea3ef7d90863da4f071aa85dd7a7a39805bc8afc88463571aec2005b797e37b9bccea2b5122c4004c75113e47fe

    • SSDEEP

      6144:tiMgOGPmTOvhjlhyyPDkmaihrtFEgZtoydwDNTqbFGxz+Wfctle:tiBOGP6UhjlhygAUrfEgZtomwDNS+Ie

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks