crimsonrat | 004936678c928e5945abc599e913e96f663fb81eef6e5d6970feac378181cccf | Triage

Sharing

General

Target

004936678c928e5945abc599e913e96f663fb81eef6e5d6970feac378181cccf
Size

102KB
Sample

220129-t4tessdfhm
MD5

94d29dded4dfd920fc4153f18e82fc6c
SHA1

57a35e324d60336b4bbff644c754bcc0b173c19b
SHA256

004936678c928e5945abc599e913e96f663fb81eef6e5d6970feac378181cccf
SHA512

149798b76a550a6070d4c97cf53c3445f3bc3a7899f25b5c8ccd20d85503c3888c872bafbe4d4ef26931267c54217dea56ea81d278e7585a73786b15a5dea8c7

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  004936678c928e5945abc599e913e96f663fb81eef6e5d6970feac378181cccf
- Size
  
  102KB
- MD5
  
  94d29dded4dfd920fc4153f18e82fc6c
- SHA1
  
  57a35e324d60336b4bbff644c754bcc0b173c19b
- SHA256
  
  004936678c928e5945abc599e913e96f663fb81eef6e5d6970feac378181cccf
- SHA512
  
  149798b76a550a6070d4c97cf53c3445f3bc3a7899f25b5c8ccd20d85503c3888c872bafbe4d4ef26931267c54217dea56ea81d278e7585a73786b15a5dea8c7
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2