General

  • Target

    Imminent Monitor 5(@DARKTEAM_69).rar

  • Size

    79.9MB

  • Sample

    241202-z3tl3asrgy

  • MD5

    3b724d253379e87d9c6311cfe405035d

  • SHA1

    60b55b7304839fad80162808b0607dc957343d44

  • SHA256

    c7077b76302bf3706188cb9818df97114377da2ee4c736d0c343c15ec59c88b3

  • SHA512

    1c9d4d1c7f78903b8a6d697ea3e39117687b760dcabe193155ac1635f7a9d4e1ea4fbcae18279352ae574ebb75290d50e2da2ada70078d0ec1234b5ae3617b42

  • SSDEEP

    1572864:wTimtBDo1SFEkgSkpJ5lXlVfLyT6IsSLpoFqmmj99yJQBaiqq3fu:Z4okFEykb5BzzhSL2FTmB0QFRu

Malware Config

Targets

    • Target

      Imminent Monitor 5(@DARKTEAM_69).rar

    • Size

      79.9MB

    • MD5

      3b724d253379e87d9c6311cfe405035d

    • SHA1

      60b55b7304839fad80162808b0607dc957343d44

    • SHA256

      c7077b76302bf3706188cb9818df97114377da2ee4c736d0c343c15ec59c88b3

    • SHA512

      1c9d4d1c7f78903b8a6d697ea3e39117687b760dcabe193155ac1635f7a9d4e1ea4fbcae18279352ae574ebb75290d50e2da2ada70078d0ec1234b5ae3617b42

    • SSDEEP

      1572864:wTimtBDo1SFEkgSkpJ5lXlVfLyT6IsSLpoFqmmj99yJQBaiqq3fu:Z4okFEykb5BzzhSL2FTmB0QFRu

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Imminent family

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks