Overview

overview

10

Static

static

489a0d32eb...77.exe

windows7-x64

10

489a0d32eb...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    489a0d32eb0a5fa49d5ea9b2174a1cf5637c9f0ac5c91efab6afa96a507c2777

  • Size

    354KB

  • Sample

    221128-wgmpvahf7y

  • MD5

    dc71196d2a323ed8baa10a9f9020bf63

  • SHA1

    2689fb029e204c726492a8d0bdf4734bca903a3a

  • SHA256

    489a0d32eb0a5fa49d5ea9b2174a1cf5637c9f0ac5c91efab6afa96a507c2777

  • SHA512

    0dcd378b8d07bbd8c1e65c38c270034cde8f53e05b51410d2a91be8f70ae8a8265b16134974dea4ea600b0a5f01e10736b608252e337e9be79b0c729322b414f

  • SSDEEP

    3072:cwi51kpjgUdkY8NveKhBAauYuZKLWV+XKiPjnNGq4HikkSK7EycrTSyak8wrQZbe:YopjgUqY8kolWVQp7LAn819vDROyErZ

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      489a0d32eb0a5fa49d5ea9b2174a1cf5637c9f0ac5c91efab6afa96a507c2777

    • Size

      354KB

    • MD5

      dc71196d2a323ed8baa10a9f9020bf63

    • SHA1

      2689fb029e204c726492a8d0bdf4734bca903a3a

    • SHA256

      489a0d32eb0a5fa49d5ea9b2174a1cf5637c9f0ac5c91efab6afa96a507c2777

    • SHA512

      0dcd378b8d07bbd8c1e65c38c270034cde8f53e05b51410d2a91be8f70ae8a8265b16134974dea4ea600b0a5f01e10736b608252e337e9be79b0c729322b414f

    • SSDEEP

      3072:cwi51kpjgUdkY8NveKhBAauYuZKLWV+XKiPjnNGq4HikkSK7EycrTSyak8wrQZbe:YopjgUqY8kolWVQp7LAn819vDROyErZ

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks