Extracted

• • Target

    a91147670d04dc3ec65a44a53a025484237456370a21a4215fab94ab56c3a361

  • Size

    372KB

  • MD5

    32626325b3b5c54be1ff12bf3df0f091

  • SHA1

    65f4d2dc8c07cdc26029e4fcd3dc9588a7c85081

  • SHA256

    a91147670d04dc3ec65a44a53a025484237456370a21a4215fab94ab56c3a361

  • SHA512

    0621cb5461c138f332cfe9087dbb3d895364cb2cabb720dc5cee8caf50b00d6f4973a5fb04a7f441a680a9aa27831ead6256303dc2dc4658f45e76665979de8c

  • SSDEEP

    6144:NoFXtijKVzQstZq5eGIZiI6yaRI0uP62ctloaeH+XzzFqG0sKfpYT:WFdYK2si0GIZR2RJuIoaeH+XzzUG0sMi

  Score

  10^/10

  imminentpersistencespywaretrojan

  • Imminent RAT

    Remote-access trojan based on Imminent Monitor remote admin software.

    trojanspywareimminent

  • Adds Run key to start application

    persistence

  • Drops desktop.ini file(s)

  • Suspicious use of SetThreadContext

  behavioral1behavioral2