imminent | 5b6bc3e2969c7ebf08413e73da96c799f4361ce2b0c11f178e366468fdb81146 | Triage

Submit
Reports

Overview

overview

Static

static

3

047fcf6cf1...47.exe

windows7-x64

047fcf6cf1...47.exe

windows10-2004-x64

Sharing

General

Target

5b6bc3e2969c7ebf08413e73da96c799f4361ce2b0c11f178e366468fdb81146
Size

425KB
Sample

240417-ralrraag84
MD5

da9051e0cfad9bb74d683843c4b34d0e
SHA1

09597890238d0aa3f2c52c6f3054a13b7fbaa738
SHA256

5b6bc3e2969c7ebf08413e73da96c799f4361ce2b0c11f178e366468fdb81146
SHA512

d2fc1a11aa7201a9972f48fe85e5401142c2f352aa05e6c8c835ede80a6f955acb66934a9819249ad436ca4a0d822f1d4719944b6fd4db2aa478e433fc0d5a60
SSDEEP

6144:4SRlSw96Cu5w96rixr8Iy/VZ2KTNfonbuNFZ8usbTh2P8UBQrt3ecRuvcvGhC1ua:FbN68yVZrNQberSZUBkekUAudCaIV

Score

10^/10

imminent persistence spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

047fcf6cf1e83002c31d9725f92abe3014bcb0a65a3078dcc6467036ba792547.exe

Resource

win7-20240221-en

imminent persistence spyware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

047fcf6cf1e83002c31d9725f92abe3014bcb0a65a3078dcc6467036ba792547.exe

Resource

win10v2004-20240412-en

imminent persistence spyware trojan

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  047fcf6cf1e83002c31d9725f92abe3014bcb0a65a3078dcc6467036ba792547.exe
- Size
  
  852KB
- MD5
  
  e04213f27f4e2c763e0b8910f7743af3
- SHA1
  
  2707a70bfb085112cb02c82c738f752a4e789825
- SHA256
  
  047fcf6cf1e83002c31d9725f92abe3014bcb0a65a3078dcc6467036ba792547
- SHA512
  
  423039cd63fac7e3ceda72bf26695cc94339b1105b4c1a0bf603364e239658b30be841c47e781da867ff1ea0f22428c589ce3daac2c3834ef58e552fdafb242e
- SSDEEP
  
  24576:2deM8k31Q2B7oVSRZw/bO/PVggnoGhkOF8rcbfdaMQ8NNr+OZQw6F77GEm+pV0kn:8e831bEOOyy
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

imminentpersistencespywaretrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.