imminent | 4195ef696648e960bcd28f15347ed3c6454b8dec1bbe5adc54c9a341c1070e89 | Triage

Submit
Reports

Overview

overview

Static

static

1

10835bbaba...18.rtf

windows7-x64

10835bbaba...18.rtf

windows10-2004-x64

1

Sharing

General

Target

10835bbaba51e62af438366f2128e5f5_JaffaCakes118
Size

1.3MB
Sample

240503-pl343agc83
MD5

10835bbaba51e62af438366f2128e5f5
SHA1

0763eb8bfb1439878c4c02ce4e950c07275ebf02
SHA256

4195ef696648e960bcd28f15347ed3c6454b8dec1bbe5adc54c9a341c1070e89
SHA512

d37cd3e3f80ca2525aadf73b964331109ae7b9aca4997b946fa83aaff8a1a9622ea8d59644f81ef36ae59ef848d9dfc327ffcfea15c3d97edfa3985d34487aa3
SSDEEP

24576:ndHDcq47d/mF6dxhXwsnfPf+5+XP0WF0ncXr4r/UjZLjkr12JzQf/jpYzQcwwKs4:9

Score

10^/10

imminent persistence spyware trojan

Static task

static1

Behavioral task

behavioral1

Sample

10835bbaba51e62af438366f2128e5f5_JaffaCakes118.rtf

Resource

win7-20231129-en

imminent persistence spyware trojan

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

10835bbaba51e62af438366f2128e5f5_JaffaCakes118.rtf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  10835bbaba51e62af438366f2128e5f5_JaffaCakes118
- Size
  
  1.3MB
- MD5
  
  10835bbaba51e62af438366f2128e5f5
- SHA1
  
  0763eb8bfb1439878c4c02ce4e950c07275ebf02
- SHA256
  
  4195ef696648e960bcd28f15347ed3c6454b8dec1bbe5adc54c9a341c1070e89
- SHA512
  
  d37cd3e3f80ca2525aadf73b964331109ae7b9aca4997b946fa83aaff8a1a9622ea8d59644f81ef36ae59ef848d9dfc327ffcfea15c3d97edfa3985d34487aa3
- SSDEEP
  
  24576:ndHDcq47d/mF6dxhXwsnfPf+5+XP0WF0ncXr4r/UjZLjkr12JzQf/jpYzQcwwKs4:9
Score

10^/10

imminent persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Exploitation for Client Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentpersistencespywaretrojan

behavioral2

© 2018-2025

Terms | Privacy