General

  • Target

    nigger.exe

  • Size

    643KB

  • Sample

    250118-lrlv7azlf1

  • MD5

    95591b530007e59526bf62b17c6e5295

  • SHA1

    4efabf484082248720e6429fa3f192b11fe5b511

  • SHA256

    fe96626158e910402b636dbad8d72b363140a41d5193833d628c98b407eb80ef

  • SHA512

    ed5b74b146cefc49062fc32be4bc0befaa70318507cf24d12c16e1bc5f85243b431b85a53b3b939cc6e067302db87247fcedb99140f3b4feb28e4b441cf16b7c

  • SSDEEP

    12288:4WvWgQs39WZAOrki7/9K9U6S8HWK/a1KPesnWwNnuFBbSEWEEEHnmfY5JdutJRMT:5v7NWei7VjiHA

Malware Config

Targets

    • Target

      nigger.exe

    • Size

      643KB

    • MD5

      95591b530007e59526bf62b17c6e5295

    • SHA1

      4efabf484082248720e6429fa3f192b11fe5b511

    • SHA256

      fe96626158e910402b636dbad8d72b363140a41d5193833d628c98b407eb80ef

    • SHA512

      ed5b74b146cefc49062fc32be4bc0befaa70318507cf24d12c16e1bc5f85243b431b85a53b3b939cc6e067302db87247fcedb99140f3b4feb28e4b441cf16b7c

    • SSDEEP

      12288:4WvWgQs39WZAOrki7/9K9U6S8HWK/a1KPesnWwNnuFBbSEWEEEHnmfY5JdutJRMT:5v7NWei7VjiHA

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Imminent family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks