crimsonrat | a74d8d6ecf4f1fd66fcc83fd76125296ea9cdffbfbacd10b04fba4dbfe9aa2f2 | Triage

Sharing

General

Target

a74d8d6ecf4f1fd66fcc83fd76125296ea9cdffbfbacd10b04fba4dbfe9aa2f2
Size

62KB
Sample

220129-xy2qrsgga6
MD5

2dfe4468a052a07cab117a20e182adc9
SHA1

afdf942dab44e9523af001271d951a69287c6843
SHA256

a74d8d6ecf4f1fd66fcc83fd76125296ea9cdffbfbacd10b04fba4dbfe9aa2f2
SHA512

d33b85a7cc857377f8b2f5c8209241a14778812a8ab1d5774c9204cf45252bdaa9741ea8aa99b1c7d58198b385e935f1bf2b725b550a312cfb3573d13a447ac9

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  a74d8d6ecf4f1fd66fcc83fd76125296ea9cdffbfbacd10b04fba4dbfe9aa2f2
- Size
  
  62KB
- MD5
  
  2dfe4468a052a07cab117a20e182adc9
- SHA1
  
  afdf942dab44e9523af001271d951a69287c6843
- SHA256
  
  a74d8d6ecf4f1fd66fcc83fd76125296ea9cdffbfbacd10b04fba4dbfe9aa2f2
- SHA512
  
  d33b85a7cc857377f8b2f5c8209241a14778812a8ab1d5774c9204cf45252bdaa9741ea8aa99b1c7d58198b385e935f1bf2b725b550a312cfb3573d13a447ac9
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2