crimsonrat | f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c | Triage

Sharing

General

Target

f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c
Size

125KB
Sample

220129-xcyf8afegm
MD5

438f3ea41587e9891484dad233d6faa6
SHA1

d75a66ebf43aefe1a7f12f7e04e3fff923e6a19e
SHA256

f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c
SHA512

229223b4fa8c812c5bd95a4d11835aebf686a43b71751f2a2ce95e79a9ac265c5e2761838e16365af9350edd2652fa8361c4b898b7ba11442edbee5c4974c1ea

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c
- Size
  
  125KB
- MD5
  
  438f3ea41587e9891484dad233d6faa6
- SHA1
  
  d75a66ebf43aefe1a7f12f7e04e3fff923e6a19e
- SHA256
  
  f5ebfbda54c3ab58798eb1d436271546bc7ea9aea8e25b688489a0313b55c67c
- SHA512
  
  229223b4fa8c812c5bd95a4d11835aebf686a43b71751f2a2ce95e79a9ac265c5e2761838e16365af9350edd2652fa8361c4b898b7ba11442edbee5c4974c1ea
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2