crimsonrat | 2042b4c5ee7ebb4253d59dc084742f2d2c3c102aa9983333e0785de4d689e6fc | Triage

Sharing

General

Target

2042b4c5ee7ebb4253d59dc084742f2d2c3c102aa9983333e0785de4d689e6fc
Size

125KB
Sample

220129-v49bpafcd7
MD5

71cd70b289c53567579f8f6033d8191b
SHA1

bb160e68a045d9c66895efe2c3d44b1b9a20775b
SHA256

2042b4c5ee7ebb4253d59dc084742f2d2c3c102aa9983333e0785de4d689e6fc
SHA512

2bd6941a8fd50d62fd711a9d83d5792e1ee7ae5cdbc57ed5083dcca00a28efb871877fd3589b27f4d94979020fbfcb6c9526a51854a216ad811ed8e22de84a45

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  2042b4c5ee7ebb4253d59dc084742f2d2c3c102aa9983333e0785de4d689e6fc
- Size
  
  125KB
- MD5
  
  71cd70b289c53567579f8f6033d8191b
- SHA1
  
  bb160e68a045d9c66895efe2c3d44b1b9a20775b
- SHA256
  
  2042b4c5ee7ebb4253d59dc084742f2d2c3c102aa9983333e0785de4d689e6fc
- SHA512
  
  2bd6941a8fd50d62fd711a9d83d5792e1ee7ae5cdbc57ed5083dcca00a28efb871877fd3589b27f4d94979020fbfcb6c9526a51854a216ad811ed8e22de84a45
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2