crimsonrat | 0638cdef52fd46ad9f6d9064be686e6aecf48b0ea26db6eb28c2954a510479c7 | Triage

Sharing

General

Target

0638cdef52fd46ad9f6d9064be686e6aecf48b0ea26db6eb28c2954a510479c7
Size

96KB
Sample

220129-rq9hrabhbq
MD5

f078b5aeaf73831361ecd96a069c9f50
SHA1

18607b8eae4c762e30f743ffef000c717077ea5c
SHA256

0638cdef52fd46ad9f6d9064be686e6aecf48b0ea26db6eb28c2954a510479c7
SHA512

863cf0d7ab2420b88c31b4162a9b4605fdafb1fe3dd84df981c4e6dc80148e0aa915a6648900d88461f0c268d21b37d9aa67dfcd5f4e66e30c9b15e74af73355

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  0638cdef52fd46ad9f6d9064be686e6aecf48b0ea26db6eb28c2954a510479c7
- Size
  
  96KB
- MD5
  
  f078b5aeaf73831361ecd96a069c9f50
- SHA1
  
  18607b8eae4c762e30f743ffef000c717077ea5c
- SHA256
  
  0638cdef52fd46ad9f6d9064be686e6aecf48b0ea26db6eb28c2954a510479c7
- SHA512
  
  863cf0d7ab2420b88c31b4162a9b4605fdafb1fe3dd84df981c4e6dc80148e0aa915a6648900d88461f0c268d21b37d9aa67dfcd5f4e66e30c9b15e74af73355
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2