crimsonrat | 51cb06da2422a76bc707333f5d09a4216014771b8f1f00c24c7194fd60acf4d1 | Triage

Sharing

General

Target

51cb06da2422a76bc707333f5d09a4216014771b8f1f00c24c7194fd60acf4d1
Size

125KB
MD5

b2ed9415d7cf9bc06f8ccb8cfdba1ad6
SHA1

02996c6faf5da9f6a6a909fcb800e4490f9406f1
SHA256

51cb06da2422a76bc707333f5d09a4216014771b8f1f00c24c7194fd60acf4d1
SHA512

44467d76a3549c1ce48b3076302feee8e46afc60724e69be6af31b791683bc67a01a8e34d504af9b959ea79d165ea4fb14126252a649b177e636e5d529a2ee50
SSDEEP

3072:BbaKc3GE1Pmzm0YjiUvRpjiUvRGgxzUM9Esnc8ZABk6OyV:BbaKcpO2PzP9zj9rnmk6O

Score

10^/10

crimsonrat

Malware Config

Signatures

CrimsonRAT Main Payload 1 IoCs

resource	yara_rule
sample	family_crimsonrat

Crimsonrat family
crimsonrat

Files

51cb06da2422a76bc707333f5d09a4216014771b8f1f00c24c7194fd60acf4d1
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ