Overview

overview

10

Static

static

8

2628ad9be6...fe.xls

windows7-x64

10

2628ad9be6...fe.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2628ad9be62db33bcc2dd982d80a7ec4ff840349a658795e13ef9611b784eefe

  • Size

    423KB

  • Sample

    220801-fh28xsafb7

  • MD5

    fa6a95df0af45ff6601696678af711b6

  • SHA1

    c87653f543d7c9386b92732e02ee64deac0e0100

  • SHA256

    2628ad9be62db33bcc2dd982d80a7ec4ff840349a658795e13ef9611b784eefe

  • SHA512

    362d3bd45dcf7b419661a4a77545d337d7f294a143f732e18dd7f728f04e99772bb45e205513c4c03f6975778ba2d812cc6e288ff5e6591ca04ad2a639d3fc02

Score
10/10
crimsonratmacromacro_on_actionrat

Malware Config

Targets

    • Target

      2628ad9be62db33bcc2dd982d80a7ec4ff840349a658795e13ef9611b784eefe

    • Size

      423KB

    • MD5

      fa6a95df0af45ff6601696678af711b6

    • SHA1

      c87653f543d7c9386b92732e02ee64deac0e0100

    • SHA256

      2628ad9be62db33bcc2dd982d80a7ec4ff840349a658795e13ef9611b784eefe

    • SHA512

      362d3bd45dcf7b419661a4a77545d337d7f294a143f732e18dd7f728f04e99772bb45e205513c4c03f6975778ba2d812cc6e288ff5e6591ca04ad2a639d3fc02

    Score
    10/10
    crimsonratrat

    • CrimsonRAT main payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

      ratcrimsonrat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks