Overview

overview

10

Static

static

6c917faa1a...db.exe

windows7_x64

10

6c917faa1a...db.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c917faa1a5ea5ae74525ace0c39c4a9208cb48f64372b8cd97c2e6e96a957db

  • Size

    1.1MB

  • Sample

    220130-tl3kraeff6

  • MD5

    645d2fdc3d638b6e9eeeda9bf7bd332b

  • SHA1

    380150520be6c22ec302d0f89ac1f312a7b2dfa6

  • SHA256

    6c917faa1a5ea5ae74525ace0c39c4a9208cb48f64372b8cd97c2e6e96a957db

  • SHA512

    a1ac538eaf42f522f05c04833d6bdb736489f6c702f5bb74435fcaa5b80241ad9e69a3088e9b16a665d1140cc4d5ba0f8326a6092147b0be93cb9cb705297539

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      6c917faa1a5ea5ae74525ace0c39c4a9208cb48f64372b8cd97c2e6e96a957db

    • Size

      1.1MB

    • MD5

      645d2fdc3d638b6e9eeeda9bf7bd332b

    • SHA1

      380150520be6c22ec302d0f89ac1f312a7b2dfa6

    • SHA256

      6c917faa1a5ea5ae74525ace0c39c4a9208cb48f64372b8cd97c2e6e96a957db

    • SHA512

      a1ac538eaf42f522f05c04833d6bdb736489f6c702f5bb74435fcaa5b80241ad9e69a3088e9b16a665d1140cc4d5ba0f8326a6092147b0be93cb9cb705297539

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks