imminent | 1f571395f90145cf5179f3ae88f8365371ca0ee45cf986101605f9f3e167bcf4 | Triage

Sharing

General

Target

1f571395f90145cf5179f3ae88f8365371ca0ee45cf986101605f9f3e167bcf4.exe
Size

908KB
Sample

241123-t4shhaxqe1
MD5

8e2a5fd038e57f041eda66f17e4b2bfb
SHA1

56159808ebc3ba08e1dc4c9ad4807128ea1993ea
SHA256

1f571395f90145cf5179f3ae88f8365371ca0ee45cf986101605f9f3e167bcf4
SHA512

42a41b9c4d07497c7dc2c04a175c505939dad0a77ac4c284571ef0e1ebb7a67fdb6f3220b6d84b09541bdb52277d5871c4e4cd1754589f473d118ef5fe607842
SSDEEP

12288:QqjqRBa80gi+TCUQpd6KA26mY6nltHnhm9FXRR:QwqN0gi+TCUQvHEFXz

Score

10^/10

imminent discovery persistence spyware trojan

Malware Config

Targets

- Target
  
  1f571395f90145cf5179f3ae88f8365371ca0ee45cf986101605f9f3e167bcf4.exe
- Size
  
  908KB
- MD5
  
  8e2a5fd038e57f041eda66f17e4b2bfb
- SHA1
  
  56159808ebc3ba08e1dc4c9ad4807128ea1993ea
- SHA256
  
  1f571395f90145cf5179f3ae88f8365371ca0ee45cf986101605f9f3e167bcf4
- SHA512
  
  42a41b9c4d07497c7dc2c04a175c505939dad0a77ac4c284571ef0e1ebb7a67fdb6f3220b6d84b09541bdb52277d5871c4e4cd1754589f473d118ef5fe607842
- SSDEEP
  
  12288:QqjqRBa80gi+TCUQpd6KA26mY6nltHnhm9FXRR:QwqN0gi+TCUQvHEFXz
Score

10^/10

imminent discovery persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Imminent family
  imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoverypersistencespywaretrojan

behavioral2

imminentdiscoverypersistencespywaretrojan