Overview

overview

10

Static

static

e91836bbf9...22.exe

windows7_x64

10

e91836bbf9...22.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e91836bbf90b1eafd5cdcf8868408309470d4a06c5239dfee7dd74eca1a7f222

  • Size

    224KB

  • Sample

    220121-3akegacfb8

  • MD5

    80ec3ed170b8dab29b21e67c6bdd9114

  • SHA1

    64cd27112e99a6f7b319553545a65ad8873dc230

  • SHA256

    e91836bbf90b1eafd5cdcf8868408309470d4a06c5239dfee7dd74eca1a7f222

  • SHA512

    71f4974086a6a45b99c3a9fe02bcab445bee673154782ac6fb85a0c61f6367829012fc5f3190828a9ebc425fa2f624ebc6a103416b10daebf281841e36e426bf

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      e91836bbf90b1eafd5cdcf8868408309470d4a06c5239dfee7dd74eca1a7f222

    • Size

      224KB

    • MD5

      80ec3ed170b8dab29b21e67c6bdd9114

    • SHA1

      64cd27112e99a6f7b319553545a65ad8873dc230

    • SHA256

      e91836bbf90b1eafd5cdcf8868408309470d4a06c5239dfee7dd74eca1a7f222

    • SHA512

      71f4974086a6a45b99c3a9fe02bcab445bee673154782ac6fb85a0c61f6367829012fc5f3190828a9ebc425fa2f624ebc6a103416b10daebf281841e36e426bf

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks