crimsonrat | 5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba | Triage

Resubmissions

29-01-2022 15:13

220129-sl6rqscehj 10

Sharing

General

Target

5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba
Size

125KB
MD5

cedb0fc3dfbb748fdcbb3eae9eb0a3f1
SHA1

2bc0fba586148f69616239a1c939ddaff371bd14
SHA256

5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba
SHA512

dd514537e942f2fe647efc3a07b928a447b60248174bdfc00a9c28968d7f588f916e14f15ed7522f40870c192e4a63da5348e98742b36cdda22fea2bf72d697b
SSDEEP

3072:HY5Bybw0gjiUvRpjiUvR23ULWcM9Esn6pCSubiMyi+uZ:HY6MPzPHWb9ribuZ

Score

10^/10

crimsonrat

Malware Config

Signatures

CrimsonRAT Main Payload 1 IoCs

Processes:

resource	yara_rule
sample	family_crimsonrat

Crimsonrat family
crimsonrat

Files

5481af07cff7edf221b3c05bb24780e58b321595c40b776da4fb7cde4693dfba
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ