crimsonrat | 819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7 | Triage

Sharing

General

Target

819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7
Size

162KB
Sample

220129-tlqaesdcen
MD5

a74165ec1d55b682ed232ffde62b3b11
SHA1

df8822b47f7bea4a8b21a0708dd48b1cbced8e90
SHA256

819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7
SHA512

a46ea23ed75715a0881b0294218decda50bf565fc273c24a119d73747d5f06c8e47e8d68a00a2c024e32ee24b93c9804cbd6f9ecc6e83ca0f240fc4818d51713

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7
- Size
  
  162KB
- MD5
  
  a74165ec1d55b682ed232ffde62b3b11
- SHA1
  
  df8822b47f7bea4a8b21a0708dd48b1cbced8e90
- SHA256
  
  819a689239d1354c4cc4fadb398d42fee4a066af0235c7d2af997a4d1617e3d7
- SHA512
  
  a46ea23ed75715a0881b0294218decda50bf565fc273c24a119d73747d5f06c8e47e8d68a00a2c024e32ee24b93c9804cbd6f9ecc6e83ca0f240fc4818d51713
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2