crimsonrat | dd56146ce07f793e09134f18e62968159ab26690a7742f12e52d808d3e2fc032 | Triage

Sharing

General

Target

dd56146ce07f793e09134f18e62968159ab26690a7742f12e52d808d3e2fc032
Size

125KB
Sample

220129-yrtx1sgffr
MD5

12929730cd95c6cf50dd3d470dd5f347
SHA1

75b3dc0d7eeae91d2bee63f91896abea7d40213d
SHA256

dd56146ce07f793e09134f18e62968159ab26690a7742f12e52d808d3e2fc032
SHA512

885b337435fdeb6054ac2f4f0c3a1710e7d1a8bef1c84e526a20d19489454287f809dc59db0b935dd8bb4d1272f309e17e50dc461198812cc51cfc8b164bcfbe

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  dd56146ce07f793e09134f18e62968159ab26690a7742f12e52d808d3e2fc032
- Size
  
  125KB
- MD5
  
  12929730cd95c6cf50dd3d470dd5f347
- SHA1
  
  75b3dc0d7eeae91d2bee63f91896abea7d40213d
- SHA256
  
  dd56146ce07f793e09134f18e62968159ab26690a7742f12e52d808d3e2fc032
- SHA512
  
  885b337435fdeb6054ac2f4f0c3a1710e7d1a8bef1c84e526a20d19489454287f809dc59db0b935dd8bb4d1272f309e17e50dc461198812cc51cfc8b164bcfbe
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2