imminent | 32d2b33067419d6dab4410e787f3f886de2b7571017879fe7280e11cf3455c7e

General

Target

32d2b33067419d6dab4410e787f3f886de2b7571017879fe7280e11cf3455c7e
Size

685KB
Sample

221126-zc8cjafh5t
MD5

ac4959f40f22a11ee528ef90e22db442
SHA1

e20043be99033f6d47b18393f67ac8753427ed5d
SHA256

32d2b33067419d6dab4410e787f3f886de2b7571017879fe7280e11cf3455c7e
SHA512

12c824f695f01d6fd227d1c087ca5494ea190f7c30c3e668b8c2705e39c4ce123dc7c12a5e0bd672f85a6e1edc4fd775ee41379d7f0416a3d708e64188794848
SSDEEP

12288:+F6kN+Db1SIsf8rG8fv+epDbyk0nLi1fxIBxixny:+F6kcnUIA8rvv+cPyk0nG5OYy

Score

10^/10

Malware Config

Targets

- Target
  
  32d2b33067419d6dab4410e787f3f886de2b7571017879fe7280e11cf3455c7e
- Size
  
  685KB
- MD5
  
  ac4959f40f22a11ee528ef90e22db442
- SHA1
  
  e20043be99033f6d47b18393f67ac8753427ed5d
- SHA256
  
  32d2b33067419d6dab4410e787f3f886de2b7571017879fe7280e11cf3455c7e
- SHA512
  
  12c824f695f01d6fd227d1c087ca5494ea190f7c30c3e668b8c2705e39c4ce123dc7c12a5e0bd672f85a6e1edc4fd775ee41379d7f0416a3d708e64188794848
- SSDEEP
  
  12288:+F6kN+Db1SIsf8rG8fv+epDbyk0nLi1fxIBxixny:+F6kcnUIA8rvv+cPyk0nG5OYy
Score

10^/10

imminent modiloader persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Imminent RAT

ModiLoader, DBatLoader

ModiLoader Second Stage

Executes dropped EXE

Checks computer location settings

Loads dropped DLL

Adds Run key to start application

Drops desktop.ini file(s)

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2