crimsonrat | 1cb8ca75dbc6c42d9f76281c7cc73333a146832f444f69c0ebf47ccb9bfdd010 | Triage

Sharing

General

Target

1cb8ca75dbc6c42d9f76281c7cc73333a146832f444f69c0ebf47ccb9bfdd010
Size

106KB
Sample

220129-vgqk3aegb4
MD5

139a346c537ab91a38b438c82c8c219f
SHA1

880fa1a65d8c529753e64e4ed22d0e3622b9b030
SHA256

1cb8ca75dbc6c42d9f76281c7cc73333a146832f444f69c0ebf47ccb9bfdd010
SHA512

5143029646e058f6c85dc0b812d839227f3640540fa1469089ceea5cb5335175c289537722bf9f476cfcf86b422ca53e4b5a89e2602767be5c9908998c79add6

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  1cb8ca75dbc6c42d9f76281c7cc73333a146832f444f69c0ebf47ccb9bfdd010
- Size
  
  106KB
- MD5
  
  139a346c537ab91a38b438c82c8c219f
- SHA1
  
  880fa1a65d8c529753e64e4ed22d0e3622b9b030
- SHA256
  
  1cb8ca75dbc6c42d9f76281c7cc73333a146832f444f69c0ebf47ccb9bfdd010
- SHA512
  
  5143029646e058f6c85dc0b812d839227f3640540fa1469089ceea5cb5335175c289537722bf9f476cfcf86b422ca53e4b5a89e2602767be5c9908998c79add6
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2