Overview

overview

10

Static

static

b2681f8970...a0.exe

windows7-x64

10

b2681f8970...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2681f89708870a957d83e8ca660e6172af4f97ba9213587f3e0e2f64f13c4a0

  • Size

    415KB

  • Sample

    221127-l3wvjach31

  • MD5

    32b3c213e0e9407d84c388c3a2d61530

  • SHA1

    fea00fbe8070e7af536a9ccdcee80421d0d02914

  • SHA256

    b2681f89708870a957d83e8ca660e6172af4f97ba9213587f3e0e2f64f13c4a0

  • SHA512

    5974f91a2ff013f7f59a851378aac4b46d3f22a5af624eda2a815136ae0399edc2035590808fe679752e38477b44c615a93e035acf893a63eb4e31a0dddb5700

  • SSDEEP

    6144:umLyp8Uwu8Uok9evvP1yRSC3BaBUoakVxEMDvy1/Oe5deo0O8EdETXIon9ng:TLyuUQAyNyZ3BTjOEE70Ev

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      b2681f89708870a957d83e8ca660e6172af4f97ba9213587f3e0e2f64f13c4a0

    • Size

      415KB

    • MD5

      32b3c213e0e9407d84c388c3a2d61530

    • SHA1

      fea00fbe8070e7af536a9ccdcee80421d0d02914

    • SHA256

      b2681f89708870a957d83e8ca660e6172af4f97ba9213587f3e0e2f64f13c4a0

    • SHA512

      5974f91a2ff013f7f59a851378aac4b46d3f22a5af624eda2a815136ae0399edc2035590808fe679752e38477b44c615a93e035acf893a63eb4e31a0dddb5700

    • SSDEEP

      6144:umLyp8Uwu8Uok9evvP1yRSC3BaBUoakVxEMDvy1/Oe5deo0O8EdETXIon9ng:TLyuUQAyNyZ3BTjOEE70Ev

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks