imminent | 6183efca5674c3d96f1783317d4406d97a8551bfc6f67826876480c3bbb6e1a4 | Triage

Sharing

General

Target

6183efca5674c3d96f1783317d4406d97a8551bfc6f67826876480c3bbb6e1a4
Size

321KB
Sample

220730-zq3zzaggfr
MD5

6ab0e6c80f6f02742e4469aa826732ff
SHA1

5e30f661f1067866b6aeb756904bce21ef4dcdd3
SHA256

6183efca5674c3d96f1783317d4406d97a8551bfc6f67826876480c3bbb6e1a4
SHA512

56ea199a0b36ee1bbdd78dca172f2804139e5307222a258218f83fd02d28c7a43deb3bb8f29dda348569a2e747920718e4bfe1c8b1319b34cc6ed1add2d99308

Score

10^/10

imminent spyware trojan

Malware Config

Targets

- Target
  
  6183efca5674c3d96f1783317d4406d97a8551bfc6f67826876480c3bbb6e1a4
- Size
  
  321KB
- MD5
  
  6ab0e6c80f6f02742e4469aa826732ff
- SHA1
  
  5e30f661f1067866b6aeb756904bce21ef4dcdd3
- SHA256
  
  6183efca5674c3d96f1783317d4406d97a8551bfc6f67826876480c3bbb6e1a4
- SHA512
  
  56ea199a0b36ee1bbdd78dca172f2804139e5307222a258218f83fd02d28c7a43deb3bb8f29dda348569a2e747920718e4bfe1c8b1319b34cc6ed1add2d99308
Score

10^/10

imminent spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentspywaretrojan

behavioral2