imminent | ee74dcfc2c793e31464765575b88a36906aecb3daf685932abc3231e30cd8923 | Triage

Sharing

General

Target

ee74dcfc2c793e31464765575b88a36906aecb3daf685932abc3231e30cd8923
Size

680KB
Sample

241216-bdtc1awkat
MD5

de14f5adcd20b19b6b221647507c7c09
SHA1

74a3dad2deeffa26a21f643273089847df606f3f
SHA256

ee74dcfc2c793e31464765575b88a36906aecb3daf685932abc3231e30cd8923
SHA512

72f3950a43bac271ddd9290bfcbf4d26072abb584f9d643d90b0a98ae2e05da2649b193336d826412f8b130fd1854d76ffba9c4464f9993640154e97e4cc12c3
SSDEEP

12288:PWvWgQsk97ZQjoOi1dkxVU6S8HWK/a1KPesnWwNnuFBbSEWEEEHnmfY5JdutJRMf:4v7k7ii1yUiH0

Score

10^/10

imminent discovery persistence spyware trojan

Malware Config

Targets

- Target
  
  ee74dcfc2c793e31464765575b88a36906aecb3daf685932abc3231e30cd8923
- Size
  
  680KB
- MD5
  
  de14f5adcd20b19b6b221647507c7c09
- SHA1
  
  74a3dad2deeffa26a21f643273089847df606f3f
- SHA256
  
  ee74dcfc2c793e31464765575b88a36906aecb3daf685932abc3231e30cd8923
- SHA512
  
  72f3950a43bac271ddd9290bfcbf4d26072abb584f9d643d90b0a98ae2e05da2649b193336d826412f8b130fd1854d76ffba9c4464f9993640154e97e4cc12c3
- SSDEEP
  
  12288:PWvWgQsk97ZQjoOi1dkxVU6S8HWK/a1KPesnWwNnuFBbSEWEEEHnmfY5JdutJRMf:4v7k7ii1yUiH0
Score

10^/10

imminent discovery persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Imminent family
  imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoverypersistencespywaretrojan

behavioral2

imminentdiscoverypersistencespywaretrojan