imminent | 8004e7a720dba922a3fa5a956bfef9d8189b02ff2f72d1a66421ececd8245811 | Triage

Submit
Reports

Overview

overview

Static

static

3

0b028c5946...18.exe

windows7-x64

0b028c5946...18.exe

windows10-2004-x64

7

Sharing

General

Target

0b028c59462504f316fdd978e96ca852_JaffaCakes118
Size

1.5MB
Sample

240501-d3el9aha86
MD5

0b028c59462504f316fdd978e96ca852
SHA1

221e13e8770f55e45fb12ed9c6249a37b2c82f9a
SHA256

8004e7a720dba922a3fa5a956bfef9d8189b02ff2f72d1a66421ececd8245811
SHA512

dd89c41f6eb9a2a34bc0ad540f87979f3578a643f20a2c3d8609ee9ce739a83819b0e0fd5f008870c9504f3072523ca074b85fc1cae0c06a41d6bf6fac0a6b43
SSDEEP

12288:iLWzQWmzgFsw/vf8uzFwxCyEFKFHeSJ7zdGT0Lb2ZoF9Mt8:iL0pYgF7E0FOCyGKNeSJ7zdGgXIt8

Score

10^/10

imminent spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0b028c59462504f316fdd978e96ca852_JaffaCakes118.exe

Resource

win7-20240221-en

imminent spyware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

0b028c59462504f316fdd978e96ca852_JaffaCakes118.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  0b028c59462504f316fdd978e96ca852_JaffaCakes118
- Size
  
  1.5MB
- MD5
  
  0b028c59462504f316fdd978e96ca852
- SHA1
  
  221e13e8770f55e45fb12ed9c6249a37b2c82f9a
- SHA256
  
  8004e7a720dba922a3fa5a956bfef9d8189b02ff2f72d1a66421ececd8245811
- SHA512
  
  dd89c41f6eb9a2a34bc0ad540f87979f3578a643f20a2c3d8609ee9ce739a83819b0e0fd5f008870c9504f3072523ca074b85fc1cae0c06a41d6bf6fac0a6b43
- SSDEEP
  
  12288:iLWzQWmzgFsw/vf8uzFwxCyEFKFHeSJ7zdGT0Lb2ZoF9Mt8:iL0pYgF7E0FOCyGKNeSJ7zdGgXIt8
Score

10^/10

imminent spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentspywaretrojan

behavioral2

© 2018-2025

Terms | Privacy