Overview

overview

10

Static

static

5

06a66efa39...6f.exe

windows7-x64

10

06a66efa39...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06a66efa39b3258602d8d6f6742452f2efb8befce6320b58e6ea5e8b9e30d86f

  • Size

    803KB

  • Sample

    250123-x9pwcazrdt

  • MD5

    4d70c4f7594371493e4372f4c5cc2c49

  • SHA1

    019f726fc46d6ce1a73cd87a46e2d565bf8271eb

  • SHA256

    06a66efa39b3258602d8d6f6742452f2efb8befce6320b58e6ea5e8b9e30d86f

  • SHA512

    685661f913b2d348929de9981575d343bee7a0c9beb152df09f24fb44d8260b787815fa13039a08059daf2073f898f6f51459141589689dab45fe52851ab1934

  • SSDEEP

    24576:bkGvM/P1U4bBTOKr26GU5OYsnXgxvrQrAnuIwE:b2/P1UOtOKC6GrYsgxTQTID

Score
10/10
imminentdiscoveryspywaretrojanupx

Malware Config

Targets

    • Target

      06a66efa39b3258602d8d6f6742452f2efb8befce6320b58e6ea5e8b9e30d86f

    • Size

      803KB

    • MD5

      4d70c4f7594371493e4372f4c5cc2c49

    • SHA1

      019f726fc46d6ce1a73cd87a46e2d565bf8271eb

    • SHA256

      06a66efa39b3258602d8d6f6742452f2efb8befce6320b58e6ea5e8b9e30d86f

    • SHA512

      685661f913b2d348929de9981575d343bee7a0c9beb152df09f24fb44d8260b787815fa13039a08059daf2073f898f6f51459141589689dab45fe52851ab1934

    • SSDEEP

      24576:bkGvM/P1U4bBTOKr26GU5OYsnXgxvrQrAnuIwE:b2/P1UOtOKC6GrYsgxTQTID

    Score
    10/10
    imminentdiscoveryspywaretrojanupx

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Imminent family

      imminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks