imminent | 366637c07a173edd0f75c648329d28ccd90b3023e36d9f0d286cd0b4fb20d16b | Triage

Submit
Reports

Overview

overview

Static

static

366637c07a...6b.exe

windows7-x64

366637c07a...6b.exe

windows10-2004-x64

Sharing

General

Target

366637c07a173edd0f75c648329d28ccd90b3023e36d9f0d286cd0b4fb20d16b
Size

292KB
Sample

221003-bstmbacadk
MD5

74e3fa4922117a3590762f656b370460
SHA1

366230a669899cf18bed70829fbfe4988fd784bc
SHA256

366637c07a173edd0f75c648329d28ccd90b3023e36d9f0d286cd0b4fb20d16b
SHA512

6bae7a1e7f83a65d486731eb2c9638e18a485e535304c0f3dfaa746f50a21a3ea6e23db7e5407ed063b08261831475fbf8826506cbf1d2574a9d320670c48a8a
SSDEEP

6144:jAejTtnO3Q/ztCy+qsom6YUunlcv+p8iJpH0arDNPp2zctloEuNUypR:JjTIQbfso1YdlE+p7JpHvDvEIp

Score

10^/10

imminent persistence spyware trojan

Static task

static1

Behavioral task

behavioral1

Sample

366637c07a173edd0f75c648329d28ccd90b3023e36d9f0d286cd0b4fb20d16b.exe

Resource

win7-20220812-en

imminent persistence spyware trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

366637c07a173edd0f75c648329d28ccd90b3023e36d9f0d286cd0b4fb20d16b.exe

Resource

win10v2004-20220812-en

imminent persistence spyware trojan

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  366637c07a173edd0f75c648329d28ccd90b3023e36d9f0d286cd0b4fb20d16b
- Size
  
  292KB
- MD5
  
  74e3fa4922117a3590762f656b370460
- SHA1
  
  366230a669899cf18bed70829fbfe4988fd784bc
- SHA256
  
  366637c07a173edd0f75c648329d28ccd90b3023e36d9f0d286cd0b4fb20d16b
- SHA512
  
  6bae7a1e7f83a65d486731eb2c9638e18a485e535304c0f3dfaa746f50a21a3ea6e23db7e5407ed063b08261831475fbf8826506cbf1d2574a9d320670c48a8a
- SSDEEP
  
  6144:jAejTtnO3Q/ztCy+qsom6YUunlcv+p8iJpH0arDNPp2zctloEuNUypR:JjTIQbfso1YdlE+p7JpHvDvEIp
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan

© 2018-2025

Terms | Privacy