Overview

overview

10

Static

static

8

071c2ac354...f0.doc

windows7_x64

10

071c2ac354...f0.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    071c2ac354452d484a37e7af15dd4685061dd4af93abad4308f41df673132ff0

  • Size

    529KB

  • Sample

    220130-t51v9sfcd3

  • MD5

    4c0e752600746b6d67cf1d49c103d64a

  • SHA1

    438850c4611c409e816f6981569b6a1ed68d2720

  • SHA256

    071c2ac354452d484a37e7af15dd4685061dd4af93abad4308f41df673132ff0

  • SHA512

    fd0b993c7595751c7eff2a288b3503f4d16fb7466c65bc224abbc902b722082878c24ccfc8a8b8c24f52f8248996af13642092a0c5e5ebf2def60d78d5ebb811

Score
10/10
crimsonratmacromacro_on_actionrat

Malware Config

Targets

    • Target

      071c2ac354452d484a37e7af15dd4685061dd4af93abad4308f41df673132ff0

    • Size

      529KB

    • MD5

      4c0e752600746b6d67cf1d49c103d64a

    • SHA1

      438850c4611c409e816f6981569b6a1ed68d2720

    • SHA256

      071c2ac354452d484a37e7af15dd4685061dd4af93abad4308f41df673132ff0

    • SHA512

      fd0b993c7595751c7eff2a288b3503f4d16fb7466c65bc224abbc902b722082878c24ccfc8a8b8c24f52f8248996af13642092a0c5e5ebf2def60d78d5ebb811

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks