Overview

overview

10

Static

static

69f998bd67...c5.doc

windows7_x64

10

69f998bd67...c5.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69f998bd67a5dbfd79bcc44f0cf2284ed61fac9bfaba3d3b4dfb19a57baa29c5

  • Size

    533KB

  • Sample

    201212-nk43rgbfh2

  • MD5

    41b70737fa8dda75d5e95c82699c2e9b

  • SHA1

    cd3bb41346fdc37053dc6b5a83f2c77fe4e2c3bf

  • SHA256

    69f998bd67a5dbfd79bcc44f0cf2284ed61fac9bfaba3d3b4dfb19a57baa29c5

  • SHA512

    1ceac62694165f281846bf27ebd693c8368fc28e487961b01c369ad3276ea63e97766e07b419f4140ba42b24bc350818104534b5bcff9635097f06a866b3acab

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      69f998bd67a5dbfd79bcc44f0cf2284ed61fac9bfaba3d3b4dfb19a57baa29c5

    • Size

      533KB

    • MD5

      41b70737fa8dda75d5e95c82699c2e9b

    • SHA1

      cd3bb41346fdc37053dc6b5a83f2c77fe4e2c3bf

    • SHA256

      69f998bd67a5dbfd79bcc44f0cf2284ed61fac9bfaba3d3b4dfb19a57baa29c5

    • SHA512

      1ceac62694165f281846bf27ebd693c8368fc28e487961b01c369ad3276ea63e97766e07b419f4140ba42b24bc350818104534b5bcff9635097f06a866b3acab

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks