imminent | 298eb84ad50993b327c6d6c78365d5b96d734f058f72ca6946e6d80419d0acc1 | Triage

Sharing

General

Target

298eb84ad50993b327c6d6c78365d5b96d734f058f72ca6946e6d80419d0acc1
Size

272KB
Sample

221126-15plkahc82
MD5

05e3529116106c9237d4d55cd2045dbb
SHA1

4b9cacb6009222c97f539ca5a98d620316863283
SHA256

298eb84ad50993b327c6d6c78365d5b96d734f058f72ca6946e6d80419d0acc1
SHA512

1f0ccd7ce7a5726d5f88a9afaf8d91849dbb7683c8189467785880880313b0e559762e20bcc53efd48711ed92473c763fa454f0793d53f50e4d43911bba2a109
SSDEEP

6144:hRGcwGgucqAJoKvNXMVpJcfMVhLahR34oKMNB3Ta+dvnY3Cy2VdSUjctl:hRGVn1JdFupAMVhWL3phBjaz3VLUjI

Score

10^/10

imminent persistence spyware trojan

Malware Config

Targets

- Target
  
  298eb84ad50993b327c6d6c78365d5b96d734f058f72ca6946e6d80419d0acc1
- Size
  
  272KB
- MD5
  
  05e3529116106c9237d4d55cd2045dbb
- SHA1
  
  4b9cacb6009222c97f539ca5a98d620316863283
- SHA256
  
  298eb84ad50993b327c6d6c78365d5b96d734f058f72ca6946e6d80419d0acc1
- SHA512
  
  1f0ccd7ce7a5726d5f88a9afaf8d91849dbb7683c8189467785880880313b0e559762e20bcc53efd48711ed92473c763fa454f0793d53f50e4d43911bba2a109
- SSDEEP
  
  6144:hRGcwGgucqAJoKvNXMVpJcfMVhLahR34oKMNB3Ta+dvnY3Cy2VdSUjctl:hRGVn1JdFupAMVhWL3phBjaz3VLUjI
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan