Overview

overview

7

Static

static

7

ISL Light ...99.exe

windows10-2004-x64

4

ISL Light ...99.exe

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    ISL Light Client 78241199.exe
  • Size 639KB
  • Sample261015-qd9sbavvb1
  • SHA256 d7a79893772c70a96f556ebd3fa3330a5a415b2952e157a947bd50cbd34c972d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
backdoorrat

Malware Config

Signatures

  • ISLOnlineRMM remote administration tool 1 IoCs

    ISLOnlineRMM is a remote monitoring and management tool that can be used as a backdoor.

    backdoorrat

File Explorer

  • ISL Light Client 78241199.exe
    .exe 639KB

ISL Light Client 78241199.exe

  • IMPHASH 64734cdb1c07748bf4a02729548341af
  • SHA256 d7a79893772c70a96f556ebd3fa3330a5a415b2952e157a947bd50cbd34c972d
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • ISLOnlineRMM remote administration tool

    ISLOnlineRMM is a remote monitoring and management tool that can be used as a backdoor.

    backdoorrat
Digest
e8:37:bf:f9:29:a7:6e:1d:98:18:d7:c1:9d:53:4f:02:57:c4:80:f9:38:b1:6f:c1:69:43:68:42:59:40:c6:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=PDQ.com Corporation,O=PDQ.com Corporation,L=South Salt Lake,ST=Utah,C=US
Minor OS version
1
Major OS version
5
Entry point
26854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\Builds\CL-NS154-BW32\b.ProgramISLNetworkStart_win32.0\Release\launch_normal.pdb