General

  • Target

    imaEMkTJ.exe

  • Size

    86KB

  • Sample

    230601-2bq3zagg54

  • MD5

    2553268f6c7849013d613df2ad949551

  • SHA1

    9f81718f22449f64f00e51befb357a3accda275d

  • SHA256

    1bd006633daaf93877026cae5f48e4cedbba90391105da4c96141fc5cda35987

  • SHA512

    a7152cc923738db8e9c86d784b30c7aa4555be2330f6e194cfe19cdfffd7bcc75a379641d7bb2bb2f9a6a3d1f1d83bf35f15cd54d6bd66bb6d360fe9fb9ce9e6

  • SSDEEP

    1536:N7DbZOmFIAby9rpbCEUpDpaO6rcdEqy2qvSwWZ+QAsp420UK/gTLQuJl3teQ6+xD:LOaI7l9VeDp/6odzofWZ+8GU3TkGjR9

Malware Config

Targets

    • Target

      Device/HarddiskVolume9/RECYCLER/S-3-5-01-4621304173-6055156028-813125507-4057/imaEMkTJ.exe

    • Size

      185KB

    • MD5

      59157bcbfe97f9f8b00af1eb39c87a53

    • SHA1

      63f11e1730237a17d71bb1927e67f561a7dec607

    • SHA256

      d49df261cebcfdc69c73a485002786c0ace31ee0c85cbfe45b830de3c737b941

    • SHA512

      034a730883b0436326b67e996182e0749513f2e1be8b554ff91cfc121d0ea38c7651e0b2dbfadcb34e7b43b54b2fecf35cf8135b227ffe6717e356c5f17ca65c

    • SSDEEP

      1536:+OC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF5frleGhd9TfBi:+wV4OgSzBmh04eZFkz3Rr0gwGj9Tf8

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks