crimsonrat | 78175b44c1cbedb79c179c33c3def3ea140b209f15dde8fa3f8c45004394a76e | Triage

Sharing

General

Target

78175b44c1cbedb79c179c33c3def3ea140b209f15dde8fa3f8c45004394a76e
Size

95KB
Sample

220129-v67wmseegq
MD5

943f35200dce22766d0c2906d25be187
SHA1

6e9f7890dbe523a5cadcb33e20a2e78a69936b01
SHA256

78175b44c1cbedb79c179c33c3def3ea140b209f15dde8fa3f8c45004394a76e
SHA512

369934dc25bc07392aa6895cce589cb8e41cee8bbf7125669c7f31138c4e46511216ee2f8162931a60fe91f3ccb939dec99181ac37000d884865e9392d111098

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  78175b44c1cbedb79c179c33c3def3ea140b209f15dde8fa3f8c45004394a76e
- Size
  
  95KB
- MD5
  
  943f35200dce22766d0c2906d25be187
- SHA1
  
  6e9f7890dbe523a5cadcb33e20a2e78a69936b01
- SHA256
  
  78175b44c1cbedb79c179c33c3def3ea140b209f15dde8fa3f8c45004394a76e
- SHA512
  
  369934dc25bc07392aa6895cce589cb8e41cee8bbf7125669c7f31138c4e46511216ee2f8162931a60fe91f3ccb939dec99181ac37000d884865e9392d111098
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2