General
- Target 600055___27757f28-141f-4a80-bb7e-1f514388b5ae.exe
- Size 636KB
- Sample261022-w15prsev5x
- SHA256 39b5be95913c9914119f59c19ae255107d12d1a403b7c93edc7373fc4d6e50df
Score
10/10
Malware Config
Targets
-
- Target 600055___27757f28-141f-4a80-bb7e-1f514388b5ae.exe
- Size 636KB
- SHA256 39b5be95913c9914119f59c19ae255107d12d1a403b7c93edc7373fc4d6e50df
Score10/10-
Family: Imminent RAT
Remote-access trojan based on Imminent Monitor remote admin software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1