imminent | 2a059184ff951ab49ab1022f829896e394531f18eb3682aae2159c145815c4db | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...e2.exe

windows7-x64

JaffaCakes...e2.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_5d554caaf210664ea715b3e07396cae2
Size

442KB
Sample

250107-mdgvraxjav
MD5

5d554caaf210664ea715b3e07396cae2
SHA1

b76b380c115107e002af56ad9365d40457543ae6
SHA256

2a059184ff951ab49ab1022f829896e394531f18eb3682aae2159c145815c4db
SHA512

2bb956b200cf5948c479c8218be8269a5957dc3104b1aa08469c22ba6262c4653fea6e3230f1b1b007ca137779083f82bf2428e4f664138b635c922f4285ee4c
SSDEEP

12288:gO3nzR81/CPPYYg8btjp5lQ6GGb2I+ON3BVHLIcgwazbXk:5zO1/mYYg85N5lB2PEzO

Score

10^/10

imminent discovery spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_5d554caaf210664ea715b3e07396cae2.exe

Resource

win7-20240729-en

imminent discovery spyware trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_5d554caaf210664ea715b3e07396cae2.exe

Resource

win10v2004-20241007-en

imminent discovery spyware trojan

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_5d554caaf210664ea715b3e07396cae2
- Size
  
  442KB
- MD5
  
  5d554caaf210664ea715b3e07396cae2
- SHA1
  
  b76b380c115107e002af56ad9365d40457543ae6
- SHA256
  
  2a059184ff951ab49ab1022f829896e394531f18eb3682aae2159c145815c4db
- SHA512
  
  2bb956b200cf5948c479c8218be8269a5957dc3104b1aa08469c22ba6262c4653fea6e3230f1b1b007ca137779083f82bf2428e4f664138b635c922f4285ee4c
- SSDEEP
  
  12288:gO3nzR81/CPPYYg8btjp5lQ6GGb2I+ON3BVHLIcgwazbXk:5zO1/mYYg85N5lB2PEzO
Score

10^/10

imminent discovery spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Imminent family
  imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoveryspywaretrojan

behavioral2

imminentdiscoveryspywaretrojan

© 2018-2025

Terms | Privacy