crimsonrat | c160ee1a5ece22d04bc1368d2d36b4c143e0e33083da5cb0bdf56d872255cc9b | Triage

Sharing

General

Target

c160ee1a5ece22d04bc1368d2d36b4c143e0e33083da5cb0bdf56d872255cc9b
Size

108KB
Sample

220129-w96y7afeam
MD5

463565ec38e4d790a89eb592435820e3
SHA1

10493cecd82d5d5ada7e1b3e661b9dca21a9781d
SHA256

c160ee1a5ece22d04bc1368d2d36b4c143e0e33083da5cb0bdf56d872255cc9b
SHA512

92a5f8bf8e7f4e2082ce894001e54da611f968c2cc6f3f1c476a901c031853e91a7701346018e7a6dafef03c651647d0da31f00fb6ac4594b47239d17993cdf6

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  c160ee1a5ece22d04bc1368d2d36b4c143e0e33083da5cb0bdf56d872255cc9b
- Size
  
  108KB
- MD5
  
  463565ec38e4d790a89eb592435820e3
- SHA1
  
  10493cecd82d5d5ada7e1b3e661b9dca21a9781d
- SHA256
  
  c160ee1a5ece22d04bc1368d2d36b4c143e0e33083da5cb0bdf56d872255cc9b
- SHA512
  
  92a5f8bf8e7f4e2082ce894001e54da611f968c2cc6f3f1c476a901c031853e91a7701346018e7a6dafef03c651647d0da31f00fb6ac4594b47239d17993cdf6
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2