Overview

overview

10

Static

static

my fldr fo...sh.exe

windows7_x64

10

my fldr fo...sh.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a8903d201f01608fba5c48f0f9d6d0546a0534c8af6fa61ecf28b2f484e77fe

  • Size

    383KB

  • Sample

    220130-tmdm1seff9

  • MD5

    7b32bf96bf6e43745aa270dbf58cbe53

  • SHA1

    05b4180a4883525cdcdc637a793d9bbe1f01f0b4

  • SHA256

    1a8903d201f01608fba5c48f0f9d6d0546a0534c8af6fa61ecf28b2f484e77fe

  • SHA512

    ff61a66da19f2944c3aeb7bf7787756c56dd094b2d0929abdd54e5988508c27a6c73721156fd0f9762a4e42d2f3d430178c7bf2bbfb84770fab4eb4730c11e42

Score
10/10
crimsonratrat

Malware Config

Targets

    • Target

      my fldr for u diensh/my folder for u dinesh.exe

    • Size

      1.1MB

    • MD5

      645d2fdc3d638b6e9eeeda9bf7bd332b

    • SHA1

      380150520be6c22ec302d0f89ac1f312a7b2dfa6

    • SHA256

      6c917faa1a5ea5ae74525ace0c39c4a9208cb48f64372b8cd97c2e6e96a957db

    • SHA512

      a1ac538eaf42f522f05c04833d6bdb736489f6c702f5bb74435fcaa5b80241ad9e69a3088e9b16a665d1140cc4d5ba0f8326a6092147b0be93cb9cb705297539

    Score
    10/10
    crimsonratrat

    • CrimsonRAT Main Payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks