Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ignvdmvra.exe

windows7_x64

1

ignvdmvra.exe

windows10_x64

1

Bhthmars/i...ra.exe

windows7_x64

1

Bhthmars/i...ra.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd8ced785e918da29bebe5f49a909794594fec7564477d8db4aa9a170681ea39

  • Size

    75KB

  • MD5

    0f0ada6d17053ceebf9d83b698c74f9f

  • SHA1

    1af5aba7d2e93558416b8156c232d1d745664eac

  • SHA256

    fd8ced785e918da29bebe5f49a909794594fec7564477d8db4aa9a170681ea39

  • SHA512

    6f3d2fba6ef9fdada3147b0429587eddd928fb82917b43a58c54d3a9f82d6dfdaec736945d0cccb1ddba0032f0a28c661f1b3b82933b71c3ccdfae04e82a9ebf

  • SSDEEP

    1536:kcaj7JZr+guGGp2MdImJ/XwrABrABrABrA+rLn9fqhyT+4Im1Ke:nQ7TpuGGp2gImpthqPe

Score
10/10
crimsonrat

Malware Config

Signatures

  • CrimsonRAT Main Payload 2 IoCs
  • Crimsonrat family
    crimsonrat

Files

  • fd8ced785e918da29bebe5f49a909794594fec7564477d8db4aa9a170681ea39
    .zip
  • Bhthmars/dhzilwca.zip
    .zip
  • ignvdmvra.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Bhthmars/ignvdmvra.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections