Overview

overview

10

Static

static

8

b29691ac40...06.xls

windows7_x64

10

b29691ac40...06.xls

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806

  • Size

    428KB

  • Sample

    220121-297hlschen

  • MD5

    5158c5c17862225a86c8a4f36f054ae2

  • SHA1

    6da27200f473f8c55bb125f68314eecb2219c3dd

  • SHA256

    b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806

  • SHA512

    c006f8ce77ef7dc150f137bb876a31e8f62f58e8337f487bab17752aa9eea95070e78b791488f36a2d152a871533a8bb9ee601f0053d1a2256d9e3cec3e7fe75

Score
10/10
crimsonratmacromacro_on_actionrat

Malware Config

Targets

    • Target

      b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806

    • Size

      428KB

    • MD5

      5158c5c17862225a86c8a4f36f054ae2

    • SHA1

      6da27200f473f8c55bb125f68314eecb2219c3dd

    • SHA256

      b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806

    • SHA512

      c006f8ce77ef7dc150f137bb876a31e8f62f58e8337f487bab17752aa9eea95070e78b791488f36a2d152a871533a8bb9ee601f0053d1a2256d9e3cec3e7fe75

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks