crimsonrat | 43e973e87611c27c40b131a880a1718ce9c689dabc82c102aa918e1b920eea89 | Triage

Sharing

General

Target

43e973e87611c27c40b131a880a1718ce9c689dabc82c102aa918e1b920eea89
Size

102KB
Sample

220129-rj7qksbgbq
MD5

2abf53905c6b0c8f8728a343089723d8
SHA1

f83048f505a2dc298a130d8e4af66fc3eb44863f
SHA256

43e973e87611c27c40b131a880a1718ce9c689dabc82c102aa918e1b920eea89
SHA512

5a0e5f2e443e1a127690b1013c419dd91177e556a134ca9daaae0cc63f65f458b3c9fe82cf73263ad83c1cc4e041cd03f7c0a6b07ea984cb1b1b8d3d68d43c67

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  43e973e87611c27c40b131a880a1718ce9c689dabc82c102aa918e1b920eea89
- Size
  
  102KB
- MD5
  
  2abf53905c6b0c8f8728a343089723d8
- SHA1
  
  f83048f505a2dc298a130d8e4af66fc3eb44863f
- SHA256
  
  43e973e87611c27c40b131a880a1718ce9c689dabc82c102aa918e1b920eea89
- SHA512
  
  5a0e5f2e443e1a127690b1013c419dd91177e556a134ca9daaae0cc63f65f458b3c9fe82cf73263ad83c1cc4e041cd03f7c0a6b07ea984cb1b1b8d3d68d43c67
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2