Overview

overview

10

Static

static

8

965b90d435...69.doc

windows7_x64

10

965b90d435...69.doc

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    965b90d435c1676fa78cdce1eee2ec70e3194c0e4f0d993bc36bfd9f77697969

  • Size

    487KB

  • Sample

    210514-lswzd1rh7x

  • MD5

    80812d4b01071a137f5bf845beb80e8b

  • SHA1

    3ee10a5a36c3dd3e1d1b7b356f7c022768c276ff

  • SHA256

    965b90d435c1676fa78cdce1eee2ec70e3194c0e4f0d993bc36bfd9f77697969

  • SHA512

    d5f5c33e3328c1e7444e3851c6f9e3cdc2fd2ee25f7d9a123ff3bf11e6e4702d0b7e0fd49aa305dac015b823d6c0a096805241bb5358f1414f825ab5005743b4

Score
10/10
crimsonratmacromacro_on_actionrat

Malware Config

Targets

    • Target

      965b90d435c1676fa78cdce1eee2ec70e3194c0e4f0d993bc36bfd9f77697969

    • Size

      487KB

    • MD5

      80812d4b01071a137f5bf845beb80e8b

    • SHA1

      3ee10a5a36c3dd3e1d1b7b356f7c022768c276ff

    • SHA256

      965b90d435c1676fa78cdce1eee2ec70e3194c0e4f0d993bc36bfd9f77697969

    • SHA512

      d5f5c33e3328c1e7444e3851c6f9e3cdc2fd2ee25f7d9a123ff3bf11e6e4702d0b7e0fd49aa305dac015b823d6c0a096805241bb5358f1414f825ab5005743b4

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks