Analysis
-
max time kernel
187s -
max time network
106s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
28-11-2022 06:27
General
-
Target
258a9ee5fe3b761fe03e2dfbd813c65df532b93cfa9dd0ba87a157398eeb89f2.exe
-
Size
273KB
-
MD5
2e28ea890aa5825242b0aa6e56c445f8
-
SHA1
2b0bc2a2b7f19f126ebf1bd00bb5b497b832fc82
-
SHA256
258a9ee5fe3b761fe03e2dfbd813c65df532b93cfa9dd0ba87a157398eeb89f2
-
SHA512
032d85fb73b210074cbb0ad07b62c228554a34a5ae5dc28d7bd384f124efbea28dc26d91909b2a7bdce6e527e23be38dbc6089c723c6d447a5a7767b2beefd3e
-
SSDEEP
6144:o2ijtv451Kyo96Q6ecUBeQ9SWZXqB37I7vIxH4aj9ecHE0WM5nctlM5:oFj1QDo9bc0lycrIxH4aj9ZHE0WMdIM5
Score
10/10
Malware Config
Signatures
-
Imminent RAT
Remote-access trojan based on Imminent Monitor remote admin software.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\258a9ee5fe3b761fe03e2dfbd813c65df532b93cfa9dd0ba87a157398eeb89f2.exe"C:\Users\Admin\AppData\Local\Temp\258a9ee5fe3b761fe03e2dfbd813c65df532b93cfa9dd0ba87a157398eeb89f2.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
5.7MB
-
Filesize
5.7MB