Overview

overview

10

Static

static

1

cea2d53f37...9c.exe

windows7-x64

10

cea2d53f37...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cea2d53f3741c750f8da141ce3044b9c

  • Size

    548KB

  • Sample

    240316-v2b86sfe8x

  • MD5

    cea2d53f3741c750f8da141ce3044b9c

  • SHA1

    e4c40c26e0556447cbb8c5731aa3b4fe9a1e9399

  • SHA256

    059da1d4aca3dac5c4e827e9e7a5ebd07e3b3581135c200cdcb7c5e9be5065e3

  • SHA512

    36067bd002f52ea95d6eb2d2a84808a879bc0af619938ade50b2bb08fe440af897815b5066c89fbe7383f99f08a77449fdfd0524636b22a500117d3c17fec615

  • SSDEEP

    12288:e9dVKCxkIgeqXqXBb9P3BpcLLWW7HMwBIMQxlskGljE3af6EJ:yXKCFgeCqXBN3MswjQxkJ

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      cea2d53f3741c750f8da141ce3044b9c

    • Size

      548KB

    • MD5

      cea2d53f3741c750f8da141ce3044b9c

    • SHA1

      e4c40c26e0556447cbb8c5731aa3b4fe9a1e9399

    • SHA256

      059da1d4aca3dac5c4e827e9e7a5ebd07e3b3581135c200cdcb7c5e9be5065e3

    • SHA512

      36067bd002f52ea95d6eb2d2a84808a879bc0af619938ade50b2bb08fe440af897815b5066c89fbe7383f99f08a77449fdfd0524636b22a500117d3c17fec615

    • SSDEEP

      12288:e9dVKCxkIgeqXqXBb9P3BpcLLWW7HMwBIMQxlskGljE3af6EJ:yXKCFgeCqXBN3MswjQxkJ

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks