crimsonrat | 49096cb1914b4e9cf0088d60185a48e0242f3b3e4c3a7aab2cfc25aa98270025 | Triage

Sharing

General

Target

49096cb1914b4e9cf0088d60185a48e0242f3b3e4c3a7aab2cfc25aa98270025
Size

56KB
Sample

220129-wpk6zsfacq
MD5

5b4361e6a6117e9f7189a564f46157d7
SHA1

f33f85659806779248b464e43df5ca8ee34d0174
SHA256

49096cb1914b4e9cf0088d60185a48e0242f3b3e4c3a7aab2cfc25aa98270025
SHA512

49e697af58c4af3ee64512cb33a6e69680d7d17ecab7a16388515244d60d607896bc15d41cf9ebcf0be0695f335121164838de6ad8671a3af39c44e13bb8d4f6

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  49096cb1914b4e9cf0088d60185a48e0242f3b3e4c3a7aab2cfc25aa98270025
- Size
  
  56KB
- MD5
  
  5b4361e6a6117e9f7189a564f46157d7
- SHA1
  
  f33f85659806779248b464e43df5ca8ee34d0174
- SHA256
  
  49096cb1914b4e9cf0088d60185a48e0242f3b3e4c3a7aab2cfc25aa98270025
- SHA512
  
  49e697af58c4af3ee64512cb33a6e69680d7d17ecab7a16388515244d60d607896bc15d41cf9ebcf0be0695f335121164838de6ad8671a3af39c44e13bb8d4f6
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2