imminent | fc409acc344d3299f319ddd47afc86310aa931fc799a360d2708f9a93facbd69 | Triage

Submit
Reports

Overview

overview

Static

static

fc409acc34...69.exe

windows7-x64

fc409acc34...69.exe

windows10-2004-x64

Sharing

General

Target

fc409acc344d3299f319ddd47afc86310aa931fc799a360d2708f9a93facbd69
Size

354KB
Sample

221029-rwrj5abfdp
MD5

5344175e5547955aed85be21871213d0
SHA1

2c560d8197c3972e5e11dad105143cd52b7dfea3
SHA256

fc409acc344d3299f319ddd47afc86310aa931fc799a360d2708f9a93facbd69
SHA512

1591d2f41dc7432e2ad598a7e48f579ae3f3a97d269148125b609b8fdd9978b2d0d970546a2afa0331f0c01057f6dcf395e3a3ab3dfa23bb66e50e19cb97c958
SSDEEP

3072:0wi51kpjgUdkY8NvaKyGVy1ltYWVnXKiivnFOq43yUQBB3cuAUXXinIcsHtPbXlx:wopjgUqY84ALWVkt3HhybgzvDROyESZ

Score

10^/10

imminent persistence spyware trojan

Static task

static1

Behavioral task

behavioral1

Sample

fc409acc344d3299f319ddd47afc86310aa931fc799a360d2708f9a93facbd69.exe

Resource

win7-20220812-en

imminent persistence spyware trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

fc409acc344d3299f319ddd47afc86310aa931fc799a360d2708f9a93facbd69.exe

Resource

win10v2004-20220812-en

imminent persistence spyware trojan

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  fc409acc344d3299f319ddd47afc86310aa931fc799a360d2708f9a93facbd69
- Size
  
  354KB
- MD5
  
  5344175e5547955aed85be21871213d0
- SHA1
  
  2c560d8197c3972e5e11dad105143cd52b7dfea3
- SHA256
  
  fc409acc344d3299f319ddd47afc86310aa931fc799a360d2708f9a93facbd69
- SHA512
  
  1591d2f41dc7432e2ad598a7e48f579ae3f3a97d269148125b609b8fdd9978b2d0d970546a2afa0331f0c01057f6dcf395e3a3ab3dfa23bb66e50e19cb97c958
- SSDEEP
  
  3072:0wi51kpjgUdkY8NvaKyGVy1ltYWVnXKiivnFOq43yUQBB3cuAUXXinIcsHtPbXlx:wopjgUqY84ALWVkt3HhybgzvDROyESZ
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan

© 2018-2025

Terms | Privacy