crimsonrat | f847f12ac1196ea30fd0e9bba5e270853f10db21221a4e463a3050b1bdac653c | Triage

Sharing

General

Target

f847f12ac1196ea30fd0e9bba5e270853f10db21221a4e463a3050b1bdac653c
Size

59KB
Sample

220129-vm41msehb8
MD5

8317bb3d192c4495507a5945f27705af
SHA1

2eab604f0ff183191afbf37cd55de32542b15e47
SHA256

f847f12ac1196ea30fd0e9bba5e270853f10db21221a4e463a3050b1bdac653c
SHA512

6f70bb125ff4eb544db824915f06e3f90cb56939f3ca460edaf251998d52d23919f774fdcdb08ffeb323aaa2a9de709302fb824a5373b9fc5b7418c445de3e28

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  f847f12ac1196ea30fd0e9bba5e270853f10db21221a4e463a3050b1bdac653c
- Size
  
  59KB
- MD5
  
  8317bb3d192c4495507a5945f27705af
- SHA1
  
  2eab604f0ff183191afbf37cd55de32542b15e47
- SHA256
  
  f847f12ac1196ea30fd0e9bba5e270853f10db21221a4e463a3050b1bdac653c
- SHA512
  
  6f70bb125ff4eb544db824915f06e3f90cb56939f3ca460edaf251998d52d23919f774fdcdb08ffeb323aaa2a9de709302fb824a5373b9fc5b7418c445de3e28
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2