crimsonrat | 2e0108dcb1859c775bce8a198a3a88c16c21fbc4b8740d1ff9dca55d444bd698 | Triage

Sharing

General

Target

2e0108dcb1859c775bce8a198a3a88c16c21fbc4b8740d1ff9dca55d444bd698
Size

9.2MB
MD5

95b30e0bc13aafd0d5a66cc870b62b03
SHA1

e0a6a2195488dbc9c59358c16362aa67bcc7e666
SHA256

2e0108dcb1859c775bce8a198a3a88c16c21fbc4b8740d1ff9dca55d444bd698
SHA512

d8aa8cad27279dc9fc50c7c82b784c99b0e206b6b94bd1edc935d11dcab2f2eb772093ea69577c6c36e2b4796d619147037eb3a16bf17ab278642e2f6ec361f8
SSDEEP

1536:1yy4jwsgdAyGJqFqsM5E4qfltaqf9J1WsssssvxsssssDsssssvxsssssxsssssP:1yy4rqFqpwSNyI9nDW

Score

10^/10

crimsonrat

Malware Config

Signatures

CrimsonRAT Main Payload 1 IoCs

resource	yara_rule
sample	family_crimsonrat

Crimsonrat family
crimsonrat

Files

2e0108dcb1859c775bce8a198a3a88c16c21fbc4b8740d1ff9dca55d444bd698
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ