imminent | 535297fa7ca0a25bae29a97591892b19f6501300d04fb791f4cdf1e68443e186 | Triage

Sharing

General

Target

535297fa7ca0a25bae29a97591892b19f6501300d04fb791f4cdf1e68443e186
Size

293KB
Sample

221029-a2a1wsdhe6
MD5

6e991b3a1fece5eca1245671278fe7b3
SHA1

59488e5bb50f50de0918ed6502dde596d8d14b63
SHA256

535297fa7ca0a25bae29a97591892b19f6501300d04fb791f4cdf1e68443e186
SHA512

6fda298d1abf38aca349c9ed304bf93548727135d6d47e14bef0d8b6aac584f3efdd368f44d081411b7f5710c9587776c92a49772e49e542f8820bd1a32f8489
SSDEEP

6144:O6vwPu/iIbHm3RYS3ijVmkb30esF+eBYlyMioctl:FwPRUHUOS3ipmkb30j8dld7I

Score

10^/10

imminent persistence spyware trojan

Malware Config

Targets

- Target
  
  535297fa7ca0a25bae29a97591892b19f6501300d04fb791f4cdf1e68443e186
- Size
  
  293KB
- MD5
  
  6e991b3a1fece5eca1245671278fe7b3
- SHA1
  
  59488e5bb50f50de0918ed6502dde596d8d14b63
- SHA256
  
  535297fa7ca0a25bae29a97591892b19f6501300d04fb791f4cdf1e68443e186
- SHA512
  
  6fda298d1abf38aca349c9ed304bf93548727135d6d47e14bef0d8b6aac584f3efdd368f44d081411b7f5710c9587776c92a49772e49e542f8820bd1a32f8489
- SSDEEP
  
  6144:O6vwPu/iIbHm3RYS3ijVmkb30esF+eBYlyMioctl:FwPRUHUOS3ipmkb30j8dld7I
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2