crimsonrat | f23142e54092231ccc04960598d8d17f3a79a5bf0719a9a0cb73c588afae3808

General

Target
f23142e54092231ccc04960598d8d17f3a79a5bf0719a9a0cb73c588afae3808
Size 67KB
Sample220129-sp2l7adcd2
SHA256 f23142e54092231ccc04960598d8d17f3a79a5bf0719a9a0cb73c588afae3808
MD5 cb0768c89e83f2328952ba51e4d4b7f1
SHA1 dfff31642cddc28498df7e67682eef4a7647c61a
SHA512 ed9c6b632c5de10459b60e50bb7560788e38631fe72ed05b210b5f449beb8d3c290769c5e74c2c4fe245baf2b5eb0f6717fc74d41b17dc06a0b68d2e5aecf60d
SSDEEP 1536:p7MK+1p/FeD+6uATw4NLk50F9g+cLYmkdNgIWvUTIPwpawtbpXz6GqL1J9LBK9T:p5VIPy9TdYw5Ul
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

crimsonrat

Malware Config

Signatures

CrimsonRAT Main Payload 1 IoCs

resource	yara_rule
sample	family_crimsonrat

Crimsonrat family
crimsonrat

File Explorer

f23142e54092231ccc04960598d8d17f3a79a5bf0719a9a0cb73c588afae3808

.exe 67KB

f23142e54092231ccc04960598d8d17f3a79a5bf0719a9a0cb73c588afae3808

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f23142e54092231ccc04960598d8d17f3a79a5bf0719a9a0cb73c588afae3808
MD5 cb0768c89e83f2328952ba51e4d4b7f1
SHA1 dfff31642cddc28498df7e67682eef4a7647c61a
SHA512 ed9c6b632c5de10459b60e50bb7560788e38631fe72ed05b210b5f449beb8d3c290769c5e74c2c4fe245baf2b5eb0f6717fc74d41b17dc06a0b68d2e5aecf60d
SSDEEP 1536:p7MK+1p/FeD+6uATw4NLk50F9g+cLYmkdNgIWvUTIPwpawtbpXz6GqL1J9LBK9T:p5VIPy9TdYw5Ul
MD5 SHA1 SHA512 SSDEEP

windows x86

CrimsonRAT Main Payload

Minor OS version

Major OS version

Entry point

73470

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

f23142e54092231ccc04960598d8d17f3a79a5bf0719a9a0cb73c588afae3808

mscoree