Static task
static1
Behavioral task
behavioral1
Sample
9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b.exe
Resource
win10-en-20211208
General
-
Target
9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b
-
Size
74KB
-
MD5
59e0fc469d1af7532507c19b47f19960
-
SHA1
963d63b93f28f7077c77bdbdc2ec5dc39e909a3f
-
SHA256
9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b
-
SHA512
de1e47674afa8fec406d0dde073793b7e4528f2f0d2d8ad5f1fc2e0b551db615a564f8d506e4061073b36f8da3007b8aaebbe131d69a3eb8861785a6dea615a7
-
SSDEEP
768:2XbpFY647cqRaWesQb9QKHn7iRHkVURHCRyOb38Zc4HSEe49gVMaTHJiIZ2xs6/:ippLqhQp1WS3d3Cc4HLe49taTHJ12xs
Malware Config
Signatures
-
CrimsonRAT Main Payload 1 IoCs
resource yara_rule sample family_crimsonrat -
Crimsonrat family
Files
-
9262613b8a407e538462aec5902d6e8d84ad9f1345e350be3ed45098fd9a8d1b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ