General

  • Target

    oleObject1.zip

  • Size

    4.6MB

  • MD5

    e31ac765d1e97698bc1efe443325e497

  • SHA1

    930e2525c58d7509826be955f6d24b24370f7b25

  • SHA256

    ce556d55e07bf6b57e3e086e57e9c52552ac7f00adf4a7c9f99bbc21a5ac26c2

  • SHA512

    d11088e02895452a1af0df8e47449aa3150fa8c3c671bf2cd75a45c3e17ad816686dd765b7734d3310d55756ee50db3d5312e89259a10987d4bfe8354b4c98d1

  • SSDEEP

    98304:NYbWb6xADjz3FBUiDVIyXLlgjkKhixejHb5LD6pdwk4rWso10+NJwUVIm/JCdK+l:ibuQAHjAiqy2kymu5LadwFrLo10+NJwl

Score
10/10

Malware Config

Extracted

Family

crimsonrat

C2

162.245.191.217

Signatures

  • Crimsonrat family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • oleObject1.zip
    .zip
  • oleObject1.bin
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • oleObject2.bin
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections