imminent | 839244b5b58786fe44993973e74acc27def318d2461cb52dc30612766e857e14 | Triage

Sharing

General

Target

839244b5b58786fe44993973e74acc27def318d2461cb52dc30612766e857e14
Size

577KB
Sample

250104-b3f4zawqgn
MD5

7feb51850825988c38dc04f30f3ac501
SHA1

cb76c0fce19210fcfaed4e1cb9fb6ecb4a317eff
SHA256

839244b5b58786fe44993973e74acc27def318d2461cb52dc30612766e857e14
SHA512

086637fe339e52b75920c115c7c9b57895509d605a81e206776fb25b9f8049f0cddad4a4b0cc9b3aa4f6c14ada28ff2a52264fa4170be0f169ac8e4a5fe57ee0
SSDEEP

12288:YbD5arFJwK6hMJ6ZzHFZfc28beMGTfZuqb7b:rBJwdhMJ6ZzHrfcsMGTfZ5Pb

Score

10^/10

imminent discovery persistence spyware trojan

Malware Config

Targets

- Target
  
  839244b5b58786fe44993973e74acc27def318d2461cb52dc30612766e857e14
- Size
  
  577KB
- MD5
  
  7feb51850825988c38dc04f30f3ac501
- SHA1
  
  cb76c0fce19210fcfaed4e1cb9fb6ecb4a317eff
- SHA256
  
  839244b5b58786fe44993973e74acc27def318d2461cb52dc30612766e857e14
- SHA512
  
  086637fe339e52b75920c115c7c9b57895509d605a81e206776fb25b9f8049f0cddad4a4b0cc9b3aa4f6c14ada28ff2a52264fa4170be0f169ac8e4a5fe57ee0
- SSDEEP
  
  12288:YbD5arFJwK6hMJ6ZzHFZfc28beMGTfZuqb7b:rBJwdhMJ6ZzHrfcsMGTfZ5Pb
Score

10^/10

imminent discovery persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Imminent family
  imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoverypersistencespywaretrojan

behavioral2

imminentdiscoverypersistencespywaretrojan