crimsonrat | 17a1cec5b8ce358f8a0c43ac7a16292e2b455a79ba62aec1e24ac0a51427cf48 | Triage

Sharing

General

Target

17a1cec5b8ce358f8a0c43ac7a16292e2b455a79ba62aec1e24ac0a51427cf48
Size

125KB
Sample

220129-wyk8cafcaq
MD5

51c57b0366d0b71acf05b4df0afef52f
SHA1

18fcd5ca1236e67c4526fb4b5e009be97bded8db
SHA256

17a1cec5b8ce358f8a0c43ac7a16292e2b455a79ba62aec1e24ac0a51427cf48
SHA512

b81b336ce8d9732307287e691fb6d678eab77a9a58423ee4c4ce6a5673a5bf26adbb6f4c282f867cad584c1b5ebf4c6c27ce530d3189b10a178ffe7adb5aaec6

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  17a1cec5b8ce358f8a0c43ac7a16292e2b455a79ba62aec1e24ac0a51427cf48
- Size
  
  125KB
- MD5
  
  51c57b0366d0b71acf05b4df0afef52f
- SHA1
  
  18fcd5ca1236e67c4526fb4b5e009be97bded8db
- SHA256
  
  17a1cec5b8ce358f8a0c43ac7a16292e2b455a79ba62aec1e24ac0a51427cf48
- SHA512
  
  b81b336ce8d9732307287e691fb6d678eab77a9a58423ee4c4ce6a5673a5bf26adbb6f4c282f867cad584c1b5ebf4c6c27ce530d3189b10a178ffe7adb5aaec6
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2