crimsonrat | 9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b | Triage

Sharing

General

Target

9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b
Size

74KB
Sample

220129-wqsx8afgd4
MD5

59e0fc469d1af7532507c19b47f19960
SHA1

963d63b93f28f7077c77bdbdc2ec5dc39e909a3f
SHA256

9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b
SHA512

de1e47674afa8fec406d0dde073793b7e4528f2f0d2d8ad5f1fc2e0b551db615a564f8d506e4061073b36f8da3007b8aaebbe131d69a3eb8861785a6dea615a7

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b
- Size
  
  74KB
- MD5
  
  59e0fc469d1af7532507c19b47f19960
- SHA1
  
  963d63b93f28f7077c77bdbdc2ec5dc39e909a3f
- SHA256
  
  9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b
- SHA512
  
  de1e47674afa8fec406d0dde073793b7e4528f2f0d2d8ad5f1fc2e0b551db615a564f8d506e4061073b36f8da3007b8aaebbe131d69a3eb8861785a6dea615a7
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2