imminent | f7c38ab15d864198d25f33d8d643d6de954ae46ca40ce3228bbc87f8ee950a7d | Triage

Submit
Reports

Overview

overview

Static

static

8

f7c38ab15d...7d.exe

windows7-x64

f7c38ab15d...7d.exe

windows10-2004-x64

Sharing

General

Target

f7c38ab15d864198d25f33d8d643d6de954ae46ca40ce3228bbc87f8ee950a7d
Size

1.5MB
Sample

221021-xz16macaen
MD5

4159b8b0e9e179a3330758e3efafebc0
SHA1

a0df5a778d10f93c3b5fe8285f86902bb07a3fb8
SHA256

f7c38ab15d864198d25f33d8d643d6de954ae46ca40ce3228bbc87f8ee950a7d
SHA512

0ff7156769b8c112bc4547aa07ce364e4089fdde0a3989a1414a3b7282453bb59332737206dcfc0265d5d8f371a611bd1653122ac8c66597bdba8546ec094626
SSDEEP

24576:xthEVaPqLI43mWA/FQ7U6XHVthEVaPqLI43mWA/FQ7U6XHF:pEVUcIusKr39EVUcIusKr3F

Score

10^/10

imminent persistence spyware trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f7c38ab15d864198d25f33d8d643d6de954ae46ca40ce3228bbc87f8ee950a7d.exe

Resource

win7-20220901-en

imminent persistence spyware trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

f7c38ab15d864198d25f33d8d643d6de954ae46ca40ce3228bbc87f8ee950a7d.exe

Resource

win10v2004-20220812-en

imminent persistence spyware trojan upx

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  f7c38ab15d864198d25f33d8d643d6de954ae46ca40ce3228bbc87f8ee950a7d
- Size
  
  1.5MB
- MD5
  
  4159b8b0e9e179a3330758e3efafebc0
- SHA1
  
  a0df5a778d10f93c3b5fe8285f86902bb07a3fb8
- SHA256
  
  f7c38ab15d864198d25f33d8d643d6de954ae46ca40ce3228bbc87f8ee950a7d
- SHA512
  
  0ff7156769b8c112bc4547aa07ce364e4089fdde0a3989a1414a3b7282453bb59332737206dcfc0265d5d8f371a611bd1653122ac8c66597bdba8546ec094626
- SSDEEP
  
  24576:xthEVaPqLI43mWA/FQ7U6XHVthEVaPqLI43mWA/FQ7U6XHF:pEVUcIusKr39EVUcIusKr3F
Score

10^/10

imminent persistence spyware trojan upx
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojanupx

behavioral2

imminentpersistencespywaretrojanupx

© 2018-2025

Terms | Privacy