crimsonrat | 97d3eadbe9b85aeb07a0ad9fe11ff36fb34d60d4968917f9c8e3e89688e3c437 | Triage

Sharing

General

Target

97d3eadbe9b85aeb07a0ad9fe11ff36fb34d60d4968917f9c8e3e89688e3c437
Size

108KB
Sample

220129-rqdq3scdh7
MD5

f1a2caf0dd7922ea3a64231fd5af7715
SHA1

8afaec7a8d1e17bbf18c3a00bd13a2af5901711f
SHA256

97d3eadbe9b85aeb07a0ad9fe11ff36fb34d60d4968917f9c8e3e89688e3c437
SHA512

02373a97b7772a1b0bc1a2d405d94861b120c1fb05e43bddfcdc1ac08a161ce41c1b5869f9b18bd568c79153ace44f68f7b02016640084a678227d0d975bb86a

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  97d3eadbe9b85aeb07a0ad9fe11ff36fb34d60d4968917f9c8e3e89688e3c437
- Size
  
  108KB
- MD5
  
  f1a2caf0dd7922ea3a64231fd5af7715
- SHA1
  
  8afaec7a8d1e17bbf18c3a00bd13a2af5901711f
- SHA256
  
  97d3eadbe9b85aeb07a0ad9fe11ff36fb34d60d4968917f9c8e3e89688e3c437
- SHA512
  
  02373a97b7772a1b0bc1a2d405d94861b120c1fb05e43bddfcdc1ac08a161ce41c1b5869f9b18bd568c79153ace44f68f7b02016640084a678227d0d975bb86a
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2