Analysis
-
max time kernel
98s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
21-02-2023 07:32
General
-
Target
0x0006000000015ca8-408.exe
-
Size
13.0MB
-
MD5
827a3da12d83683d326d81c058c656ac
-
SHA1
3a988412a95d7129c6346a12336a6e3597a48f49
-
SHA256
6d372ac5ea7270b83a04ef72eaed5a87258cf612f4c52e4dd2a7e073e5913c5c
-
SHA512
142327a65bda6ac785908cc671d8c5a0c5418b651be789a0e442ede4a0d18cb0c25290f4f8edcc90e63c7be18ff2f2b556667cb2294af2a56df10b4243d91dec
-
SSDEEP
768:uUtpX42m7xcFM5tM5tMs9M5tM5tM5c5t9M5tM5tM5c5t9M5tM5tM5cD9M5tM5tM7:BX4fBGyMjo0bP1rwu08hHUS0bhq8DDa
Score
10/10
Malware Config
Extracted
Family
crimsonrat
C2
172.245.80.12
Signatures
-
CrimsonRat
Crimson RAT is a malware linked to a Pakistani-linked threat actor.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0006000000015ca8-408.exe"C:\Users\Admin\AppData\Local\Temp\0x0006000000015ca8-408.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
13.0MB
-
Filesize
4.8MB
-
Filesize
624KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB