crimsonrat | a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714 | Triage

Sharing

General

Target

a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714
Size

95KB
Sample

220129-x6sstsgbgl
MD5

37b93ed2e803c35d2f0dee28864a5d02
SHA1

27385b5fdfab1fd83dcac32750879ff4c2f82797
SHA256

a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714
SHA512

a98f82cecb1790693e4f15c48c35adf1d14645c98d2e808fff38018c879a1e869dadd983f495372ea99d7ba15c7bafdae521e875d5d47b8787d5ae8bfc43187c

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714
- Size
  
  95KB
- MD5
  
  37b93ed2e803c35d2f0dee28864a5d02
- SHA1
  
  27385b5fdfab1fd83dcac32750879ff4c2f82797
- SHA256
  
  a88967fdec2b2d21a766be305df9daf8c0d719f5de191b6cae659aa258ed1714
- SHA512
  
  a98f82cecb1790693e4f15c48c35adf1d14645c98d2e808fff38018c879a1e869dadd983f495372ea99d7ba15c7bafdae521e875d5d47b8787d5ae8bfc43187c
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2