crimsonrat | e394ab8a308e92ca6cf10ffbb951b3225685278b55a4b00c68c4c763d0601efa | Triage

Sharing

General

Target

e394ab8a308e92ca6cf10ffbb951b3225685278b55a4b00c68c4c763d0601efa
Size

53KB
Sample

220129-xp69wsfhal
MD5

3739bbf831d04e8a2b06275cd3af371d
SHA1

1bb0cb1be5227645c14b5757932df14b1b52c3cd
SHA256

e394ab8a308e92ca6cf10ffbb951b3225685278b55a4b00c68c4c763d0601efa
SHA512

7aa6b6cc9cf36d847580553487b52ff446310a3b8ae605d93d42090dd35e056cbafb0cf95f2359e440c262f28707478b7152d72e647990c3a660757a90bd0099

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  e394ab8a308e92ca6cf10ffbb951b3225685278b55a4b00c68c4c763d0601efa
- Size
  
  53KB
- MD5
  
  3739bbf831d04e8a2b06275cd3af371d
- SHA1
  
  1bb0cb1be5227645c14b5757932df14b1b52c3cd
- SHA256
  
  e394ab8a308e92ca6cf10ffbb951b3225685278b55a4b00c68c4c763d0601efa
- SHA512
  
  7aa6b6cc9cf36d847580553487b52ff446310a3b8ae605d93d42090dd35e056cbafb0cf95f2359e440c262f28707478b7152d72e647990c3a660757a90bd0099
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2