Overview

overview

10

Static

static

3

Pictures.rar

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pictures.rar

  • Size

    6.3MB

  • Sample

    241217-a2h2havncv

  • MD5

    16bdb4b0cd8790ce01727ef45f83f3a4

  • SHA1

    c16b199a2f82927861ea71b51c9cab8b69fe8e5f

  • SHA256

    1de273f488ea140a7c9d367ed5f8a9f6c4559cfbcce0883d747f691d0f0fb1f1

  • SHA512

    a3537225fd1812f0c233c076a3f0929d8f668eb397eb51f759752b40d4da3c199066ea02efec41ebccc822f67c9f017db5a68e928a2b2e64d86327ff65abfdf4

  • SSDEEP

    196608:AqGOJw1NWZLnH/ztVfi5j2kwLJMplKYVGQ:DxyNsLH/zfi5jeMpUYVl

Score
10/10
imminentdefense_evasiondiscoverypersistencespywaretrojan

Malware Config

Targets

    • Target

      Pictures.rar

    • Size

      6.3MB

    • MD5

      16bdb4b0cd8790ce01727ef45f83f3a4

    • SHA1

      c16b199a2f82927861ea71b51c9cab8b69fe8e5f

    • SHA256

      1de273f488ea140a7c9d367ed5f8a9f6c4559cfbcce0883d747f691d0f0fb1f1

    • SHA512

      a3537225fd1812f0c233c076a3f0929d8f668eb397eb51f759752b40d4da3c199066ea02efec41ebccc822f67c9f017db5a68e928a2b2e64d86327ff65abfdf4

    • SSDEEP

      196608:AqGOJw1NWZLnH/ztVfi5j2kwLJMplKYVGQ:DxyNsLH/zfi5jeMpUYVl

    Score
    10/10
    imminentdefense_evasiondiscoverypersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Imminent family

      imminent

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks