Overview

overview

10

Static

static

khushi pic...hi.exe

windows7_x64

10

khushi pic...hi.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfcb56e41871cf6668c2699c3b0697913d0780bc0195a51ae036db7b991797d9

  • Size

    254KB

  • Sample

    220121-27kwtscdh5

  • MD5

    2a17d5798a411365877dbcf2083b2205

  • SHA1

    03e5e88a3d96a65a757413a15c0ded7a995400b2

  • SHA256

    bfcb56e41871cf6668c2699c3b0697913d0780bc0195a51ae036db7b991797d9

  • SHA512

    90eaa6c4d5e25a08eac0be9e0b2d2b3d198a831e126d4cddb447815830d4f861618fbb882d1af6de87798258da8444bc72bc017a1b897ac85846b7fdb70aa603

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      khushi pics all/khushi.exe

    • Size

      985KB

    • MD5

      3cb7f596cbaa622e8b505335722ab558

    • SHA1

      617df380f49c4017315f503c5947c88d80b4ab21

    • SHA256

      1fdb5dd192e813f337adc21dfe4a31e1de10bd2bbb5b58ca51a6836b7e108953

    • SHA512

      b3879f19e65ec0de247c6f835405e94362697fed09669edca22ba491e1c1cd7a5e82487c26324e43db00f9c4593f32efdd81549061cb46ae9d6df61b9d6ec9a6

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks