General

  • Target

    govate wgte.exe

  • Size

    19.6MB

  • Sample

    230706-pr1k5acc2v

  • MD5

    d72f7a7742ef69a7148981383e094ee3

  • SHA1

    06fa3037c43d908f44c17d5f7a18a3bca7dd2590

  • SHA256

    f0176c4de5bdac87cc1db60abf64f0736ac101548417cba6a16f7481fccf907e

  • SHA512

    1585e73b2ce7cb83468b7522c9e294a7879e136e440a496a81d188399a7731c2119572d47ad3e6ab9cfa842f9c466ca0989d493c4689ad41b4ed34f174b87f9a

  • SSDEEP

    1536:qQfQwcbE4K8r818+iFn+j2oB3He3HWtTYlCXMikPUYxboU6yyyO7:yboU6yHO

Score
10/10

Malware Config

Extracted

Family

crimsonrat

C2

173.232.44.69

Targets

    • Target

      govate wgte.exe

    • Size

      19.6MB

    • MD5

      d72f7a7742ef69a7148981383e094ee3

    • SHA1

      06fa3037c43d908f44c17d5f7a18a3bca7dd2590

    • SHA256

      f0176c4de5bdac87cc1db60abf64f0736ac101548417cba6a16f7481fccf907e

    • SHA512

      1585e73b2ce7cb83468b7522c9e294a7879e136e440a496a81d188399a7731c2119572d47ad3e6ab9cfa842f9c466ca0989d493c4689ad41b4ed34f174b87f9a

    • SSDEEP

      1536:qQfQwcbE4K8r818+iFn+j2oB3He3HWtTYlCXMikPUYxboU6yyyO7:yboU6yHO

    Score
    10/10
    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

MITRE ATT&CK Matrix

Tasks