crimsonrat | 09f7d02a3c2382199458c98a62b045145ee54ab6aba86166aecf3d10c3c1444c | Triage

Sharing

General

Target

09f7d02a3c2382199458c98a62b045145ee54ab6aba86166aecf3d10c3c1444c
Size

125KB
Sample

220129-sdvdqsdad3
MD5

d8637bdbcfc9112fcb1f0167b398e771
SHA1

3135ba4f32052528bb0c8909fc2f954699d4a8fd
SHA256

09f7d02a3c2382199458c98a62b045145ee54ab6aba86166aecf3d10c3c1444c
SHA512

99e77185ff180b5de6a22e60071296c22b7faf708cd83a039a4de26557e2468f74fd611c1f33fa7fa0f9c42195bd9b6fddb21d35f5960b19f4bf22e7c821938b

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  09f7d02a3c2382199458c98a62b045145ee54ab6aba86166aecf3d10c3c1444c
- Size
  
  125KB
- MD5
  
  d8637bdbcfc9112fcb1f0167b398e771
- SHA1
  
  3135ba4f32052528bb0c8909fc2f954699d4a8fd
- SHA256
  
  09f7d02a3c2382199458c98a62b045145ee54ab6aba86166aecf3d10c3c1444c
- SHA512
  
  99e77185ff180b5de6a22e60071296c22b7faf708cd83a039a4de26557e2468f74fd611c1f33fa7fa0f9c42195bd9b6fddb21d35f5960b19f4bf22e7c821938b
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2