imminent | b9be4f60dbefd02d25ebd66ba363ee9421c3be6f60fd7272a0946ebc18104dfa | Triage

Sharing

General

Target

b9be4f60dbefd02d25ebd66ba363ee9421c3be6f60fd7272a0946ebc18104dfa
Size

577KB
Sample

250117-hqfq1awqal
MD5

315f07320e3d2e5100663f5af9bf13d2
SHA1

821dc2ebfd26906c487442e15f25214445facc82
SHA256

b9be4f60dbefd02d25ebd66ba363ee9421c3be6f60fd7272a0946ebc18104dfa
SHA512

26a40b3cd871db77be2fb699b1fdbf2529bad895e6e267f5e32d78222de3e0d547eb112c57b41c86b4037d36185fa83f879eb7832e63f38eef82c1cbd370518d
SSDEEP

12288:YbD5arFJwK6hMJ6ZzHFZfc28beMGTfZuqb7J:rBJwdhMJ6ZzHrfcsMGTfZ5PJ

Score

10^/10

imminent discovery persistence spyware trojan

Malware Config

Targets

- Target
  
  b9be4f60dbefd02d25ebd66ba363ee9421c3be6f60fd7272a0946ebc18104dfa
- Size
  
  577KB
- MD5
  
  315f07320e3d2e5100663f5af9bf13d2
- SHA1
  
  821dc2ebfd26906c487442e15f25214445facc82
- SHA256
  
  b9be4f60dbefd02d25ebd66ba363ee9421c3be6f60fd7272a0946ebc18104dfa
- SHA512
  
  26a40b3cd871db77be2fb699b1fdbf2529bad895e6e267f5e32d78222de3e0d547eb112c57b41c86b4037d36185fa83f879eb7832e63f38eef82c1cbd370518d
- SSDEEP
  
  12288:YbD5arFJwK6hMJ6ZzHFZfc28beMGTfZuqb7J:rBJwdhMJ6ZzHrfcsMGTfZ5PJ
Score

10^/10

imminent discovery persistence spyware trojan
- Imminent RAT
  Remote-access trojan based on Imminent Monitor remote admin software.
  trojan spyware imminent
- Imminent family
  imminent
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

imminentdiscoverypersistencespywaretrojan

behavioral2

imminentdiscoverypersistencespywaretrojan