crimsonrat | a68219383dd7e7dfd4142adac8573f89a5f6efe2feeb83c871d45c989376b8a0 | Triage

Sharing

General

Target

a68219383dd7e7dfd4142adac8573f89a5f6efe2feeb83c871d45c989376b8a0
Size

160KB
Sample

220129-r19w9scahk
MD5

e66203177a03743a6361a7b3e668b6a6
SHA1

2d3dc754b9ca399df0fc073f4eeb1b2818fcbc4d
SHA256

a68219383dd7e7dfd4142adac8573f89a5f6efe2feeb83c871d45c989376b8a0
SHA512

4821041877a1feaade24a7b55a60d972daf241f80480b0839265dc71aedaf83feb94b8c7a976c4c1c4ef39a5beaf37f01315e054e44e77346cbf46b9a0766d58

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  a68219383dd7e7dfd4142adac8573f89a5f6efe2feeb83c871d45c989376b8a0
- Size
  
  160KB
- MD5
  
  e66203177a03743a6361a7b3e668b6a6
- SHA1
  
  2d3dc754b9ca399df0fc073f4eeb1b2818fcbc4d
- SHA256
  
  a68219383dd7e7dfd4142adac8573f89a5f6efe2feeb83c871d45c989376b8a0
- SHA512
  
  4821041877a1feaade24a7b55a60d972daf241f80480b0839265dc71aedaf83feb94b8c7a976c4c1c4ef39a5beaf37f01315e054e44e77346cbf46b9a0766d58
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2