imminent | e352336170b56831ba5768ec6af2ae592abc72398d98f0c1a9a53773e2878a62 | Triage

Sharing

General

Target

b9b314fc245634b5230eea2736c24959_JaffaCakes118
Size

481KB
Sample

240823-a2cjqawerf
MD5

b9b314fc245634b5230eea2736c24959
SHA1

1ef8f02c5a60a70d88b79d263a1646b4c9ef9815
SHA256

e352336170b56831ba5768ec6af2ae592abc72398d98f0c1a9a53773e2878a62
SHA512

dd4fb8f45480b9591140e4e813add30bad1c8eab3ccadfd00e3d5e4c05e36170c4345e2af52b5b332bdb9145c594b867199899ace2f0712178f3e88e494172a8
SSDEEP

6144:JXjbNpPRMx8hU9K+SRhj+dBsWHuKCRnNrMmv1IH/V0MgraPWGuLfcwSpb1H78i+L:+NikBsKPVZwa+2J7p55UbEy

Score

10^/10

imminent discovery persistence spyware trojan

Malware Config

Targets

- Target
  
  b9b314fc245634b5230eea2736c24959_JaffaCakes118
- Size
  
  481KB
- MD5
  
  b9b314fc245634b5230eea2736c24959
- SHA1
  
  1ef8f02c5a60a70d88b79d263a1646b4c9ef9815
- SHA256
  
  e352336170b56831ba5768ec6af2ae592abc72398d98f0c1a9a53773e2878a62
- SHA512
  
  dd4fb8f45480b9591140e4e813add30bad1c8eab3ccadfd00e3d5e4c05e36170c4345e2af52b5b332bdb9145c594b867199899ace2f0712178f3e88e494172a8
- SSDEEP
  
  6144:JXjbNpPRMx8hU9K+SRhj+dBsWHuKCRnNrMmv1IH/V0MgraPWGuLfcwSpb1H78i+L:+NikBsKPVZwa+2J7p55UbEy
Score

10^/10

imminent discovery persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoverypersistencespywaretrojan

behavioral2

imminentdiscoverypersistencespywaretrojan