imminent | 3dafb816e769eec1136209b5a7474d9e9f749c83980dfc849425b8e2b0dceb09 | Triage

Sharing

General

Target

3dafb816e769eec1136209b5a7474d9e9f749c83980dfc849425b8e2b0dceb09
Size

504KB
Sample

221126-ag12ksbh5x
MD5

d34314bb304be63642bea5ef5bd6d8f7
SHA1

aa93b0519c76b7f37c61c8f91b44aed5e802a0d2
SHA256

3dafb816e769eec1136209b5a7474d9e9f749c83980dfc849425b8e2b0dceb09
SHA512

5266c2a550790224f73261b48a85be4a186a02c4b816852b293df1d2e6038737812dff0641b441c7f1215aa97284fa3211398f9f0aefe40a803646197570373c
SSDEEP

12288:CP+bpyf92lLD/OGomv7O+p4lEQUAqnlSQb5B:CP+bPN7ONlEQUAqnsQtB

Score

10^/10

imminent persistence spyware trojan

Malware Config

Targets

- Target
  
  3dafb816e769eec1136209b5a7474d9e9f749c83980dfc849425b8e2b0dceb09
- Size
  
  504KB
- MD5
  
  d34314bb304be63642bea5ef5bd6d8f7
- SHA1
  
  aa93b0519c76b7f37c61c8f91b44aed5e802a0d2
- SHA256
  
  3dafb816e769eec1136209b5a7474d9e9f749c83980dfc849425b8e2b0dceb09
- SHA512
  
  5266c2a550790224f73261b48a85be4a186a02c4b816852b293df1d2e6038737812dff0641b441c7f1215aa97284fa3211398f9f0aefe40a803646197570373c
- SSDEEP
  
  12288:CP+bpyf92lLD/OGomv7O+p4lEQUAqnlSQb5B:CP+bPN7ONlEQUAqnsQtB
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan