Overview

overview

10

Static

static

sonam karwati.exe

windows7_x64

10

sonam karwati.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    497b143d5cfcda0f409ffaf51c84bd9d8e2dfdbb22500dd17420f76b4b94c55d

  • Size

    137KB

  • Sample

    220130-sg2l8acgfq

  • MD5

    d3e904b24f50939d6df3888cce4e007c

  • SHA1

    470f25648961fa4935fb42a6e9b3e9f3361cb4bd

  • SHA256

    497b143d5cfcda0f409ffaf51c84bd9d8e2dfdbb22500dd17420f76b4b94c55d

  • SHA512

    716be87c2d039a27f47ff13d58fa8b222697b71564f09ef750df376dc4b9a2b0fb142ecfea417bc0a51029f2746ee24f256d61ccac599e5d0be3f8b6dcd2e659

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      sonam karwati.exe

    • Size

      459KB

    • MD5

      1f4afc5843bb6156627d0aa7feb18e1f

    • SHA1

      773121980b0c7b188156836b9ed341d673f8f4f6

    • SHA256

      92717c8ecbf6524a9fefb57a346872292daa2132aeb492ccf725208474ad9179

    • SHA512

      d0173b8f0bcc076c0d9fb1ae7d0e634f89a2bda56168be66e02c91fe3c084bb142ee70dcdb18fad81ed81fa550da05fe52dda36c5578287ecb9e3d4a50c409ad

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks