crimsonrat | 20209d23c45ffc377d09a53439af30f516ee833d78fb16f4eb9c74752c343fca | Triage

Sharing

General

Target

20209d23c45ffc377d09a53439af30f516ee833d78fb16f4eb9c74752c343fca
Size

125KB
MD5

7ccc752b5956b86b966d15a6a4cf6df0
SHA1

455498910d59fbe4789ed8137929cc63aca4ae1c
SHA256

20209d23c45ffc377d09a53439af30f516ee833d78fb16f4eb9c74752c343fca
SHA512

a7ffb0b5aa0b141e5af64e0415791b620d6515537611de215ffd7aefed7989b8ce302c6320490a55addf1041253a476d5a935417930b19d3369a1b08e928e2ef
SSDEEP

3072:uY5Bybw0tjiUvRpjiUvR23UL+7M9EsnNpCSubiMyi+uZ:uY6pPzPH+A9rPbuZ

Score

10^/10

crimsonrat

Malware Config

Signatures

CrimsonRAT Main Payload 1 IoCs

Processes:

resource	yara_rule
sample	family_crimsonrat

Crimsonrat family
crimsonrat

Files

20209d23c45ffc377d09a53439af30f516ee833d78fb16f4eb9c74752c343fca
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ