crimsonrat | a86e18190270888e9b8703a05c08588ab7fa841fea08ee667accc331c92e642f | Triage

Sharing

General

Target

a86e18190270888e9b8703a05c08588ab7fa841fea08ee667accc331c92e642f
Size

59KB
Sample

220129-xhamcaffdq
MD5

3ff165ee68d1bc03ae7d4d3baf99b963
SHA1

4ff623b234d7c72d3a8e12cdf90561bdd65be711
SHA256

a86e18190270888e9b8703a05c08588ab7fa841fea08ee667accc331c92e642f
SHA512

9a24e152b5ca8fff5e5a814f5d2aff8a43525451784a439872d2492ef4032cc27e0759befd3dee6ade5f44c2b85ca331c7044cc0d9a991dedbe87f84b596a7a5

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  a86e18190270888e9b8703a05c08588ab7fa841fea08ee667accc331c92e642f
- Size
  
  59KB
- MD5
  
  3ff165ee68d1bc03ae7d4d3baf99b963
- SHA1
  
  4ff623b234d7c72d3a8e12cdf90561bdd65be711
- SHA256
  
  a86e18190270888e9b8703a05c08588ab7fa841fea08ee667accc331c92e642f
- SHA512
  
  9a24e152b5ca8fff5e5a814f5d2aff8a43525451784a439872d2492ef4032cc27e0759befd3dee6ade5f44c2b85ca331c7044cc0d9a991dedbe87f84b596a7a5
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2