crimsonrat | 02283ec4ecef511350c644689aadf37e5eaf1f4d0eac249e16baac0b1298ac8d | Triage

Sharing

General

Target

02283ec4ecef511350c644689aadf37e5eaf1f4d0eac249e16baac0b1298ac8d
Size

94KB
Sample

220129-x9vftsghg5
MD5

4297041e3a701ed8c01e40d6c54264a1
SHA1

23dcec87435af17e695c8612f1453d38950bc61d
SHA256

02283ec4ecef511350c644689aadf37e5eaf1f4d0eac249e16baac0b1298ac8d
SHA512

9a97600714cd1b54705a093df9d705405dfc78480af635f18b37e907af83548ee7631742c0206f821bae8bd93af2c6b6920a43372a106f24493c282a16c0b4e2

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  02283ec4ecef511350c644689aadf37e5eaf1f4d0eac249e16baac0b1298ac8d
- Size
  
  94KB
- MD5
  
  4297041e3a701ed8c01e40d6c54264a1
- SHA1
  
  23dcec87435af17e695c8612f1453d38950bc61d
- SHA256
  
  02283ec4ecef511350c644689aadf37e5eaf1f4d0eac249e16baac0b1298ac8d
- SHA512
  
  9a97600714cd1b54705a093df9d705405dfc78480af635f18b37e907af83548ee7631742c0206f821bae8bd93af2c6b6920a43372a106f24493c282a16c0b4e2
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2