imminent | 07a13df832b87572c300c1e6c9f02c58bd888ece6f2a737a46c3416da238cde8 | Triage

Submit
Reports

Overview

overview

Static

static

07a13df832...e8.exe

windows7-x64

07a13df832...e8.exe

windows10-2004-x64

Sharing

General

Target

07a13df832b87572c300c1e6c9f02c58bd888ece6f2a737a46c3416da238cde8
Size

272KB
Sample

221122-x5bsxsed62
MD5

1879341905c8c98a58c3385bbe6665df
SHA1

b0c13e6104d4a5ab06c2d238122a5bfbdbe215db
SHA256

07a13df832b87572c300c1e6c9f02c58bd888ece6f2a737a46c3416da238cde8
SHA512

4706b628d1b3eaabad4e8b358b987b9fa90ada7588a443331e8cb52097531a28dbe79c4e6b963b76c8eda03ca94a3941c6ac225e6c7a8dd86271a19585378d0b
SSDEEP

6144:KMCvDInnJSpQs8r3jqpVfYdWxqL1ctlP2:+vSJTs8apVfoIO

Score

10^/10

imminent persistence spyware trojan

Static task

static1

Behavioral task

behavioral1

Sample

07a13df832b87572c300c1e6c9f02c58bd888ece6f2a737a46c3416da238cde8.exe

Resource

win7-20221111-en

imminent persistence spyware trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

07a13df832b87572c300c1e6c9f02c58bd888ece6f2a737a46c3416da238cde8.exe

Resource

win10v2004-20220812-en

imminent persistence spyware trojan

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  07a13df832b87572c300c1e6c9f02c58bd888ece6f2a737a46c3416da238cde8
- Size
  
  272KB
- MD5
  
  1879341905c8c98a58c3385bbe6665df
- SHA1
  
  b0c13e6104d4a5ab06c2d238122a5bfbdbe215db
- SHA256
  
  07a13df832b87572c300c1e6c9f02c58bd888ece6f2a737a46c3416da238cde8
- SHA512
  
  4706b628d1b3eaabad4e8b358b987b9fa90ada7588a443331e8cb52097531a28dbe79c4e6b963b76c8eda03ca94a3941c6ac225e6c7a8dd86271a19585378d0b
- SSDEEP
  
  6144:KMCvDInnJSpQs8r3jqpVfYdWxqL1ctlP2:+vSJTs8apVfoIO
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan

© 2018-2025

Terms | Privacy