General

  • Target

    8fbf29147f0b8d637f56afdebac49c67

  • Size

    468KB

  • Sample

    231222-p3p9jadee4

  • MD5

    8fbf29147f0b8d637f56afdebac49c67

  • SHA1

    d2804a7614d9a2912a8eb05352194d0742881d19

  • SHA256

    bbbb7cee461311300f007e2e9477710aead0525768c0a964dc8a82dcf6959944

  • SHA512

    08e6fb09e9c470c4635ce975e22d8c2ae604c344a44cc09d97c9ed62946132c2cb9a6f7677cfcfeb73e644bb024515ced2c8eb7c9c1dcdf73512ff74cd325d02

  • SSDEEP

    12288:8QiBqMgoWowK78cvmOQsbe6e+bCc/+Ex:/SqFkwK78aCwnz

Score
10/10

Malware Config

Targets

    • Target

      8fbf29147f0b8d637f56afdebac49c67

    • Size

      468KB

    • MD5

      8fbf29147f0b8d637f56afdebac49c67

    • SHA1

      d2804a7614d9a2912a8eb05352194d0742881d19

    • SHA256

      bbbb7cee461311300f007e2e9477710aead0525768c0a964dc8a82dcf6959944

    • SHA512

      08e6fb09e9c470c4635ce975e22d8c2ae604c344a44cc09d97c9ed62946132c2cb9a6f7677cfcfeb73e644bb024515ced2c8eb7c9c1dcdf73512ff74cd325d02

    • SSDEEP

      12288:8QiBqMgoWowK78cvmOQsbe6e+bCc/+Ex:/SqFkwK78aCwnz

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Drops startup file

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks