imminent | f4cdde5d4e22b79d8d15fadcf74e7a9a9c805c54b910e08be7c6422b11ce729f | Triage

Submit
Reports

Overview

overview

Static

static

1

c7209a7444...8.docm

windows7-x64

c7209a7444...8.docm

windows10-2004-x64

Sharing

General

Target

c7209a744435dcc259700a26adda4e47_JaffaCakes118
Size

680KB
Sample

240828-sxnejawbqp
MD5

c7209a744435dcc259700a26adda4e47
SHA1

31b9c510958b82e086e7ca7360d003c8c6e2193d
SHA256

f4cdde5d4e22b79d8d15fadcf74e7a9a9c805c54b910e08be7c6422b11ce729f
SHA512

ba5d27a3cd64fdff8690c5356311b4f2ea7d094922578d8c134ca209dd07d68a5d37bd4af3f458a3d0e309fa9bbd5099ec012df081dbc75b528653725a577bb3
SSDEEP

12288:gzUyhTUcvCBd//9x+BuO40ThFsi1HMKxdFnjWlKOv2cEfk+j1XFcDLthza:gzBT4/Vx+BuOVhFsi1JniN2LcDL+

Score

10^/10

imminent discovery spyware trojan

Static task

static1

Behavioral task

behavioral1

Sample

c7209a744435dcc259700a26adda4e47_JaffaCakes118.docm

Resource

win7-20240729-en

imminent discovery spyware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

c7209a744435dcc259700a26adda4e47_JaffaCakes118.docm

Resource

win10v2004-20240802-en

imminent discovery spyware trojan

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  c7209a744435dcc259700a26adda4e47_JaffaCakes118
- Size
  
  680KB
- MD5
  
  c7209a744435dcc259700a26adda4e47
- SHA1
  
  31b9c510958b82e086e7ca7360d003c8c6e2193d
- SHA256
  
  f4cdde5d4e22b79d8d15fadcf74e7a9a9c805c54b910e08be7c6422b11ce729f
- SHA512
  
  ba5d27a3cd64fdff8690c5356311b4f2ea7d094922578d8c134ca209dd07d68a5d37bd4af3f458a3d0e309fa9bbd5099ec012df081dbc75b528653725a577bb3
- SSDEEP
  
  12288:gzUyhTUcvCBd//9x+BuO40ThFsi1HMKxdFnjWlKOv2cEfk+j1XFcDLthza:gzBT4/Vx+BuOVhFsi1JniN2LcDL+
Score

10^/10

imminent discovery spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoveryspywaretrojan

behavioral2

imminentdiscoveryspywaretrojan

© 2018-2024

Terms | Privacy