crimsonrat | 4be5eabe47a3d5ed1fb9c7ed8f3374f5ddb58247598d1a71d4131549e6faeca8 | Triage

Sharing

General

Target

4be5eabe47a3d5ed1fb9c7ed8f3374f5ddb58247598d1a71d4131549e6faeca8
Size

102KB
Sample

220129-r3k1xscbbj
MD5

3a3d93c99de8c02371844dd21650e399
SHA1

e4b95a1f7d17b5a46a21d5a65290a87ace0077e5
SHA256

4be5eabe47a3d5ed1fb9c7ed8f3374f5ddb58247598d1a71d4131549e6faeca8
SHA512

a9df4b2306a85390fc27760149107371550e02bcfa39b374ddf74a405918398dc6a9562e30bdb5f831f50a79d7ab41f0e7da488b9d2004d15ddd3c0788611a63

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  4be5eabe47a3d5ed1fb9c7ed8f3374f5ddb58247598d1a71d4131549e6faeca8
- Size
  
  102KB
- MD5
  
  3a3d93c99de8c02371844dd21650e399
- SHA1
  
  e4b95a1f7d17b5a46a21d5a65290a87ace0077e5
- SHA256
  
  4be5eabe47a3d5ed1fb9c7ed8f3374f5ddb58247598d1a71d4131549e6faeca8
- SHA512
  
  a9df4b2306a85390fc27760149107371550e02bcfa39b374ddf74a405918398dc6a9562e30bdb5f831f50a79d7ab41f0e7da488b9d2004d15ddd3c0788611a63
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2