imminent | ba06b222017d418654978a57d33ea040b6fb1542c25fe8b7edf30411e2576ffd | Triage

Sharing

General

Target

ba06b222017d418654978a57d33ea040b6fb1542c25fe8b7edf30411e2576ffd
Size

577KB
Sample

250109-hvgh4asncw
MD5

c35622ca605dc19d1adad601b49bb567
SHA1

1d816c611fba6121092409aa4cc5a2bfdf3b992f
SHA256

ba06b222017d418654978a57d33ea040b6fb1542c25fe8b7edf30411e2576ffd
SHA512

86e6ded7ec40ffac36667a976578e3e810a0db3d257beae6c4ad94281f2f09447f1b32b41ad0b544d37ec9f494a6a8b3a02c69d021dc8c486992b41cc671894e
SSDEEP

12288:YbD5arFJwK6hMJ6ZzHFZfc28beMGTfZuqb7t:rBJwdhMJ6ZzHrfcsMGTfZ5Pt

Score

10^/10

imminent discovery persistence spyware trojan

Malware Config

Targets

- Target
  
  ba06b222017d418654978a57d33ea040b6fb1542c25fe8b7edf30411e2576ffd
- Size
  
  577KB
- MD5
  
  c35622ca605dc19d1adad601b49bb567
- SHA1
  
  1d816c611fba6121092409aa4cc5a2bfdf3b992f
- SHA256
  
  ba06b222017d418654978a57d33ea040b6fb1542c25fe8b7edf30411e2576ffd
- SHA512
  
  86e6ded7ec40ffac36667a976578e3e810a0db3d257beae6c4ad94281f2f09447f1b32b41ad0b544d37ec9f494a6a8b3a02c69d021dc8c486992b41cc671894e
- SSDEEP
  
  12288:YbD5arFJwK6hMJ6ZzHFZfc28beMGTfZuqb7t:rBJwdhMJ6ZzHrfcsMGTfZ5Pt
Score

10^/10

imminent discovery persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Imminent family
  imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoverypersistencespywaretrojan

behavioral2

discoverypersistence