crimsonrat | 9f50b0f990b7f89b105ab2c6d99b6bee93c3963f265ee41176d1854996069a40 | Triage

Sharing

General

Target

9f50b0f990b7f89b105ab2c6d99b6bee93c3963f265ee41176d1854996069a40
Size

87KB
Sample

220129-ttz5laece3
MD5

9e73d275202b02b3f0ed23951fda30da
SHA1

fcc8ac89581e1625a05ef54cee9ce8d3a48a8144
SHA256

9f50b0f990b7f89b105ab2c6d99b6bee93c3963f265ee41176d1854996069a40
SHA512

bc2a13759e87b6e6bdabdcaaabd6d30204ea86fc1bcb1ee8586f1aa7453247bd4618e206bc126e57129c16f0806251a8243583f1035241c9adc55d81efe037d3

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  9f50b0f990b7f89b105ab2c6d99b6bee93c3963f265ee41176d1854996069a40
- Size
  
  87KB
- MD5
  
  9e73d275202b02b3f0ed23951fda30da
- SHA1
  
  fcc8ac89581e1625a05ef54cee9ce8d3a48a8144
- SHA256
  
  9f50b0f990b7f89b105ab2c6d99b6bee93c3963f265ee41176d1854996069a40
- SHA512
  
  bc2a13759e87b6e6bdabdcaaabd6d30204ea86fc1bcb1ee8586f1aa7453247bd4618e206bc126e57129c16f0806251a8243583f1035241c9adc55d81efe037d3
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2