Overview

overview

10

Static

static

nisha aror...ma.exe

windows7_x64

10

nisha aror...ma.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0afb5b3572320c62a1cf10f98cea1f27ddb67fa4b8453f41c7a43faaaa48042e

  • Size

    176KB

  • Sample

    220130-t2tyjsecgj

  • MD5

    3638ca074886783925a426a0c126823f

  • SHA1

    f4014660b918f6879aeaa51841a25bc658ccc00b

  • SHA256

    0afb5b3572320c62a1cf10f98cea1f27ddb67fa4b8453f41c7a43faaaa48042e

  • SHA512

    64302699b226310b4ce99c0085c36687dd33f2b9381f27257a1ac90a17f5893c6ce416dc8a1d3f131f7b1d605a22c43990a56977356456cf2c847df468d7df5c

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      nisha arora sharma.exe

    • Size

      1.1MB

    • MD5

      29fca616297a9c37e800cdc7b654bc6a

    • SHA1

      40e353837ce0924b3b86badabfafe7597929aff9

    • SHA256

      f29895d3fd197101aa284f5076a40e4e951614a7faaf214254488879b2e235f3

    • SHA512

      2532bbce592e94a8eac3668da048dc87ccf632cdc65d2edfeda380f767e71f21854fa53354463b1d980fdedeab1ec5ac11f244da035c8f66e9a14397adf0fcb1

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks