crimsonrat | 3260a82398b8147c49d608295ff1a21e54a64aafb6b62c855eb4b2062f4ab6ce | Triage

Sharing

General

Target

3260a82398b8147c49d608295ff1a21e54a64aafb6b62c855eb4b2062f4ab6ce
Size

81KB
Sample

220129-rrl4vabhck
MD5

f05834a930f6fda6b877011c3fb3ef18
SHA1

5a7ff5d12d87fe90d5ba45a7d4f586db4e31dc98
SHA256

3260a82398b8147c49d608295ff1a21e54a64aafb6b62c855eb4b2062f4ab6ce
SHA512

8cbf0d18f501652de5e54dfe86072150e39c3f84a42851f758ae79c1620e10add81fee2e5b72a19cae5986348bacee54bc9a062e674e8355e13c7d3697161e0c

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  3260a82398b8147c49d608295ff1a21e54a64aafb6b62c855eb4b2062f4ab6ce
- Size
  
  81KB
- MD5
  
  f05834a930f6fda6b877011c3fb3ef18
- SHA1
  
  5a7ff5d12d87fe90d5ba45a7d4f586db4e31dc98
- SHA256
  
  3260a82398b8147c49d608295ff1a21e54a64aafb6b62c855eb4b2062f4ab6ce
- SHA512
  
  8cbf0d18f501652de5e54dfe86072150e39c3f84a42851f758ae79c1620e10add81fee2e5b72a19cae5986348bacee54bc9a062e674e8355e13c7d3697161e0c
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2