MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6451dad939c9bdab292445db5668deb2059d524dcfc97fa2216c4736a2c0f3e4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 6451dad939c9bdab292445db5668deb2059d524dcfc97fa2216c4736a2c0f3e4
SHA3-384 hash: 4d7bbf236f5fc455aa518443ed6c9ca31b44f64aadf1960b011543099acb2286ffda86342ba2f6741f42aab39bb6c442
SHA1 hash: c24ce7b94588a08f4a9ddfc8554ad419f1a641d9
MD5 hash: 5a762e5381d28524d554499a2337ae34
humanhash: spaghetti-september-helium-floor
File name:Imminent-Monitor-RAT.ex_
Download: download sample
Signature n/a
File size:620'032 bytes
First seen:2020-03-19 17:42:34 UTC
Last seen:2020-03-19 19:37:39 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (28'877 x AgentTesla, 8'705 x Formbook, 4'202 x Loki)
ssdeep 12288:kcZmEkcoC9y/+UsuF4cqQgMNRcoIL9g2QOkKO:TkQ8/Zsuy5QgyRcd0
Threatray 36 similar samples on MalwareBazaar
TLSH FCD4E015E748B636FA791E7298B201419379DD59A523E72BFC8830F9C93638C86163F3
Reporter @Libranalysis
Tags:Dot Net Imminent Monitor RAT


Twitter
@Libranalysis
Imminent Monitor RAT sample. Detailed analysis can be found here: https://maxkersten.nl/binary-analysis-course/malware-analysis/dot-net-rat/

Intelligence


File Origin
# of uploads :
2
# of downloads :
89
Origin country :
NL NL
Mail intelligence
No data
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2017-11-21 15:56:16 UTC
File Type:
PE (.Net Exe)
Extracted files:
17
AV detection:
32 of 41 (78.05%)
Threat level:
  5/5

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments