General

  • Target

    3471d2fa8670e6d69339dc53d89a9010afd3e3992022cd76e38372cdea903e99

  • Size

    272KB

  • Sample

    221128-wj1z9ahh5y

  • MD5

    e8aa6bd1ee13f50baac4a0b246bf4d17

  • SHA1

    39c204028a2841cebe094679fdaf96f33398f9ed

  • SHA256

    3471d2fa8670e6d69339dc53d89a9010afd3e3992022cd76e38372cdea903e99

  • SHA512

    85470fe0d6d49f705993fd7a81a079d94466b44ab56f73c5b507bfe197e2794b07432f9a7c70c440f6a83a9bc1b917f67e61fe42ea9d10b18af3291ac4bd9a29

  • SSDEEP

    6144:aq+Yca+ns8CcvrIMxBloYGlQODYn4vUVGZZ0uWAe7ROctlm7:ms8brIEB9DODY4MVWWAe1OIO

Malware Config

Targets

    • Target

      3471d2fa8670e6d69339dc53d89a9010afd3e3992022cd76e38372cdea903e99

    • Size

      272KB

    • MD5

      e8aa6bd1ee13f50baac4a0b246bf4d17

    • SHA1

      39c204028a2841cebe094679fdaf96f33398f9ed

    • SHA256

      3471d2fa8670e6d69339dc53d89a9010afd3e3992022cd76e38372cdea903e99

    • SHA512

      85470fe0d6d49f705993fd7a81a079d94466b44ab56f73c5b507bfe197e2794b07432f9a7c70c440f6a83a9bc1b917f67e61fe42ea9d10b18af3291ac4bd9a29

    • SSDEEP

      6144:aq+Yca+ns8CcvrIMxBloYGlQODYn4vUVGZZ0uWAe7ROctlm7:ms8brIEB9DODY4MVWWAe1OIO

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks