crimsonrat | 50de9dfa7fda82584acafb9ef9ed816587316006865092a00c56b4b3177c2786 | Triage

Sharing

General

Target

50de9dfa7fda82584acafb9ef9ed816587316006865092a00c56b4b3177c2786
Size

89KB
Sample

220129-xmh5aageb5
MD5

92f78a182faf26550d6fab2d9ec0692d
SHA1

3abd37f20fa74462f4e49d24b38e33889da22a63
SHA256

50de9dfa7fda82584acafb9ef9ed816587316006865092a00c56b4b3177c2786
SHA512

b5888ba00a5f38c6927a13ab5ccd809243b9fc3e3ab3a4ab9ddc93ce9dc1515ea2cbf3d6974cca3a455ec99a61f9da2aa76a2aed21d434b5349fbc8e332bd521

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  50de9dfa7fda82584acafb9ef9ed816587316006865092a00c56b4b3177c2786
- Size
  
  89KB
- MD5
  
  92f78a182faf26550d6fab2d9ec0692d
- SHA1
  
  3abd37f20fa74462f4e49d24b38e33889da22a63
- SHA256
  
  50de9dfa7fda82584acafb9ef9ed816587316006865092a00c56b4b3177c2786
- SHA512
  
  b5888ba00a5f38c6927a13ab5ccd809243b9fc3e3ab3a4ab9ddc93ce9dc1515ea2cbf3d6974cca3a455ec99a61f9da2aa76a2aed21d434b5349fbc8e332bd521
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2