Overview

overview

10

Static

static

230705996b...af.doc

windows7_x64

10

230705996b...af.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    230705996b567af8b2ed884e6c06cf2cf49a2cf5b4166a01c30d81de857627af

  • Size

    699KB

  • Sample

    220130-tex2padfcn

  • MD5

    9039772c966690525d843413a752be7e

  • SHA1

    d637f799d3f6a584074eaa12a3ed6da366f5450b

  • SHA256

    230705996b567af8b2ed884e6c06cf2cf49a2cf5b4166a01c30d81de857627af

  • SHA512

    c1efdcbee986075446b9469f828f6c0be71902490e81a3d9e64101aeabfc56220536894eb0a4145c619302a9c674b2a9f5877f5a892da7a8164b207f3050b501

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      230705996b567af8b2ed884e6c06cf2cf49a2cf5b4166a01c30d81de857627af

    • Size

      699KB

    • MD5

      9039772c966690525d843413a752be7e

    • SHA1

      d637f799d3f6a584074eaa12a3ed6da366f5450b

    • SHA256

      230705996b567af8b2ed884e6c06cf2cf49a2cf5b4166a01c30d81de857627af

    • SHA512

      c1efdcbee986075446b9469f828f6c0be71902490e81a3d9e64101aeabfc56220536894eb0a4145c619302a9c674b2a9f5877f5a892da7a8164b207f3050b501

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks