crimsonrat | f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97 | Triage

Sharing

General

Target

f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97
Size

160KB
Sample

220129-xn12gsfghl
MD5

38ce32cb94092cc6790030abcc9a638b
SHA1

82c0c36800674769914fd7c6bdc2566369250543
SHA256

f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97
SHA512

7dd79fd8ca08166af3819b8aa688d9944f674191ff74f032b254bd2465d45356ce3ed87f539a5d3360482a197103c76a2169953035bf7a46dd07620ab4cc14b2

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97
- Size
  
  160KB
- MD5
  
  38ce32cb94092cc6790030abcc9a638b
- SHA1
  
  82c0c36800674769914fd7c6bdc2566369250543
- SHA256
  
  f2627e172eb2a55138a4ce8c849dab3ac9991af7382c74b22308e1fe7c9f6b97
- SHA512
  
  7dd79fd8ca08166af3819b8aa688d9944f674191ff74f032b254bd2465d45356ce3ed87f539a5d3360482a197103c76a2169953035bf7a46dd07620ab4cc14b2
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2