imminent | c68f4298603a06d4dddf276c97b1bd3f87387b63d34d11d18fce8f355013e34c | Triage

Sharing

General

Target

c68f4298603a06d4dddf276c97b1bd3f87387b63d34d11d18fce8f355013e34c
Size

396KB
Sample

221121-3elhbseg9s
MD5

9b5e2f7cc7a58810e87c12061cfcf919
SHA1

8d286513240b480d65d759a6cc796177b7d20f86
SHA256

c68f4298603a06d4dddf276c97b1bd3f87387b63d34d11d18fce8f355013e34c
SHA512

de0467e5877a2ff1ec6983a83b46551a7b7120025ff53ffd3161c67db1140fa57e0fc71c5aa2eb8555a740068dd5e34fc8f3b064dd100e5ccc8b1acfc4dd1163
SSDEEP

6144:BOcSQuH8u2/aCWWNpcUJMSzx0gfL/POgubJoa/58uKN9Vsa21OeEgF:BOcEcuuae6UpxL/2j0uK1samOeL

Score

10^/10

imminent persistence spyware trojan

Malware Config

Targets

- Target
  
  c68f4298603a06d4dddf276c97b1bd3f87387b63d34d11d18fce8f355013e34c
- Size
  
  396KB
- MD5
  
  9b5e2f7cc7a58810e87c12061cfcf919
- SHA1
  
  8d286513240b480d65d759a6cc796177b7d20f86
- SHA256
  
  c68f4298603a06d4dddf276c97b1bd3f87387b63d34d11d18fce8f355013e34c
- SHA512
  
  de0467e5877a2ff1ec6983a83b46551a7b7120025ff53ffd3161c67db1140fa57e0fc71c5aa2eb8555a740068dd5e34fc8f3b064dd100e5ccc8b1acfc4dd1163
- SSDEEP
  
  6144:BOcSQuH8u2/aCWWNpcUJMSzx0gfL/POgubJoa/58uKN9Vsa21OeEgF:BOcEcuuae6UpxL/2j0uK1samOeL
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan