imminent | c9617e94a3eef5e426108a3124dc9fb512db836b5a1a2c4d9b65bde4daf511a2 | Triage

Sharing

General

Target

c9617e94a3eef5e426108a3124dc9fb512db836b5a1a2c4d9b65bde4daf511a2
Size

600KB
Sample

221128-xwtmdadh9y
MD5

aeecaa0f5f91d7e0594b59fe133936b1
SHA1

0591eca6f1468e6f0167a11dc0094afc2745fd77
SHA256

c9617e94a3eef5e426108a3124dc9fb512db836b5a1a2c4d9b65bde4daf511a2
SHA512

3bde603df5b14fc40a30984bc74156178c9934ca825154ad1b44d967ca6b80719c9fbe3bc5ecc2a41bed055e71464bd4f0b55ecc03e14534345b9a1310d8f119
SSDEEP

6144:0A7SXfiP3lLHIT18joqolPLiPtYxn+bkpKZCKTkBb+7g5Le0geiDQTJ45waOsULq:+PiKyvomfA5+7J0goe5O1vu

Score

10^/10

imminent persistence spyware trojan

Malware Config

Targets

- Target
  
  c9617e94a3eef5e426108a3124dc9fb512db836b5a1a2c4d9b65bde4daf511a2
- Size
  
  600KB
- MD5
  
  aeecaa0f5f91d7e0594b59fe133936b1
- SHA1
  
  0591eca6f1468e6f0167a11dc0094afc2745fd77
- SHA256
  
  c9617e94a3eef5e426108a3124dc9fb512db836b5a1a2c4d9b65bde4daf511a2
- SHA512
  
  3bde603df5b14fc40a30984bc74156178c9934ca825154ad1b44d967ca6b80719c9fbe3bc5ecc2a41bed055e71464bd4f0b55ecc03e14534345b9a1310d8f119
- SSDEEP
  
  6144:0A7SXfiP3lLHIT18joqolPLiPtYxn+bkpKZCKTkBb+7g5Le0geiDQTJ45waOsULq:+PiKyvomfA5+7J0goe5O1vu
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan