crimsonrat | 5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba | Triage

Resubmissions

29-01-2022 15:13

220129-sl6rqscehj 10

Sharing

General

Target

5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba
Size

125KB
Sample

220129-sl6rqscehj
MD5

cedb0fc3dfbb748fdcbb3eae9eb0a3f1
SHA1

2bc0fba586148f69616239a1c939ddaff371bd14
SHA256

5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba
SHA512

dd514537e942f2fe647efc3a07b928a447b60248174bdfc00a9c28968d7f588f916e14f15ed7522f40870c192e4a63da5348e98742b36cdda22fea2bf72d697b

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba
- Size
  
  125KB
- MD5
  
  cedb0fc3dfbb748fdcbb3eae9eb0a3f1
- SHA1
  
  2bc0fba586148f69616239a1c939ddaff371bd14
- SHA256
  
  5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba
- SHA512
  
  dd514537e942f2fe647efc3a07b928a447b60248174bdfc00a9c28968d7f588f916e14f15ed7522f40870c192e4a63da5348e98742b36cdda22fea2bf72d697b
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2