imminent | f36747b488e504d45869d73fe5d99d8f1ba9bc0a8fac4b256df2fe8b74f725ab | Triage

Submit
Reports

Overview

overview

Static

static

5

f36747b488...ab.exe

windows7-x64

f36747b488...ab.exe

windows10-2004-x64

Sharing

General

Target

f36747b488e504d45869d73fe5d99d8f1ba9bc0a8fac4b256df2fe8b74f725ab.exe
Size

1.4MB
Sample

241123-py3n3avmct
MD5

41bae65b462fd42e99015732a4c977ae
SHA1

010e1a44bbfb1c801c8232c22ea29069965c2f6f
SHA256

f36747b488e504d45869d73fe5d99d8f1ba9bc0a8fac4b256df2fe8b74f725ab
SHA512

8fd0c7baf3e1f485aca6ae0f4651b101e22b24d6a0f3d907449fd69b92bd23983552f814837d8eaa2c27291c3dce07b53371fac39527fa206ffc7968c999ec85
SSDEEP

24576:Xtb20pkaCqT5TBWgNQ7ajVKABDR9Fh7UAeVDH9RBSrG16Ae:UVg5tQ7ahdNT75sDH9RBmu5e

Score

10^/10

imminent discovery spyware trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f36747b488e504d45869d73fe5d99d8f1ba9bc0a8fac4b256df2fe8b74f725ab.exe

Resource

win7-20241010-en

imminent discovery spyware trojan

windows7-x64

11 signatures

120 seconds

Behavioral task

behavioral2

Sample

f36747b488e504d45869d73fe5d99d8f1ba9bc0a8fac4b256df2fe8b74f725ab.exe

Resource

win10v2004-20241007-en

imminent discovery spyware trojan

windows10-2004-x64

13 signatures

120 seconds

Malware Config

Targets

- Target
  
  f36747b488e504d45869d73fe5d99d8f1ba9bc0a8fac4b256df2fe8b74f725ab.exe
- Size
  
  1.4MB
- MD5
  
  41bae65b462fd42e99015732a4c977ae
- SHA1
  
  010e1a44bbfb1c801c8232c22ea29069965c2f6f
- SHA256
  
  f36747b488e504d45869d73fe5d99d8f1ba9bc0a8fac4b256df2fe8b74f725ab
- SHA512
  
  8fd0c7baf3e1f485aca6ae0f4651b101e22b24d6a0f3d907449fd69b92bd23983552f814837d8eaa2c27291c3dce07b53371fac39527fa206ffc7968c999ec85
- SSDEEP
  
  24576:Xtb20pkaCqT5TBWgNQ7ajVKABDR9Fh7UAeVDH9RBSrG16Ae:UVg5tQ7ahdNT75sDH9RBmu5e
Score

10^/10

imminent discovery spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Imminent family
  imminent
- Drops startup file
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoveryspywaretrojan

behavioral2

imminentdiscoveryspywaretrojan

© 2018-2024

Terms | Privacy