crimsonrat | 84fb5d99db36d869cf03b6b3c559fa976d0ea17e112e91596ddc0b0079a6b2e0 | Triage

Sharing

General

Target

84fb5d99db36d869cf03b6b3c559fa976d0ea17e112e91596ddc0b0079a6b2e0
Size

177KB
Sample

220129-vv1cesechm
MD5

5a6bec1a9c38f6857525cca40f64b2ed
SHA1

7b930d3516d1396a4f374ee30339e2003714e51a
SHA256

84fb5d99db36d869cf03b6b3c559fa976d0ea17e112e91596ddc0b0079a6b2e0
SHA512

463df2bc985d32e852c6ad036cd1e5c403e188662ff9dde34037abf7c92b861c638411b53cf028ff267568244b145f2ec1dd015733c532c0d214c510d19f33b6

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  84fb5d99db36d869cf03b6b3c559fa976d0ea17e112e91596ddc0b0079a6b2e0
- Size
  
  177KB
- MD5
  
  5a6bec1a9c38f6857525cca40f64b2ed
- SHA1
  
  7b930d3516d1396a4f374ee30339e2003714e51a
- SHA256
  
  84fb5d99db36d869cf03b6b3c559fa976d0ea17e112e91596ddc0b0079a6b2e0
- SHA512
  
  463df2bc985d32e852c6ad036cd1e5c403e188662ff9dde34037abf7c92b861c638411b53cf028ff267568244b145f2ec1dd015733c532c0d214c510d19f33b6
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2