General

  • Target

    ce556d55e07bf6b57e3e086e57e9c52552ac7f00adf4a7c9f99bbc21a5ac26c2_JC.zip

  • Size

    4.6MB

  • Sample

    231010-wve7xshe34

  • MD5

    e31ac765d1e97698bc1efe443325e497

  • SHA1

    930e2525c58d7509826be955f6d24b24370f7b25

  • SHA256

    ce556d55e07bf6b57e3e086e57e9c52552ac7f00adf4a7c9f99bbc21a5ac26c2

  • SHA512

    d11088e02895452a1af0df8e47449aa3150fa8c3c671bf2cd75a45c3e17ad816686dd765b7734d3310d55756ee50db3d5312e89259a10987d4bfe8354b4c98d1

  • SSDEEP

    98304:NYbWb6xADjz3FBUiDVIyXLlgjkKhixejHb5LD6pdwk4rWso10+NJwUVIm/JCdK+l:ibuQAHjAiqy2kymu5LadwFrLo10+NJwl

Score
10/10

Malware Config

Extracted

Family

crimsonrat

C2

162.245.191.217

Targets

    • Target

      oleObject1.bin

    • Size

      11.8MB

    • MD5

      59211a4e0f27d70c659636746b61945a

    • SHA1

      3d36859ee1e073282f327ede208e0cab05cb25f1

    • SHA256

      2110af4e9c7a4f7a39948cdd696fcd8b4cdbb7a6a5bf5c5a277b779cc1bf8577

    • SHA512

      b43c1083be7bea0821550226cc2e9824a97adc084987b8dfe6c995e57ac84fe3da774bda06362ec6c95ef5ef5e2a4b857db4d378fe402a3927109a2d1c24217d

    • SSDEEP

      49152:YxPpTFk3gJ/Jc/fzD0987HIT3MXgf1cH+IBShnd2s+IjsfAuMm:YNpTFkQ5Jc/LDuEHwCgr0ShYlIqP

    Score
    1/10
    • Target

      oleObject2.bin

    • Size

      11.9MB

    • MD5

      1d493e326d91c53e0f2f4320fb689d5f

    • SHA1

      e8b470e808fab757e685ee2bf8b677cd3fd082cd

    • SHA256

      a833dbdc5c2113da51bf778351834682bc6220461394050e04592cd9096e0aba

    • SHA512

      9e5d16935b46caf3b729d2fd4cca25d06fbcca737016adfe57188cfa1d5ca5153ee6a81c9267e3f9ab7f377e2388c6110b8908a717462f950f77386b21dc49d7

    • SSDEEP

      49152:YxPpTFk3gJ/Jc/fzD0987HIT3MXgf1cH+IBShnd2s+IjsfAuMm:YNpTFkQ5Jc/LDuEHwCgr0ShYlIqP

    Score
    10/10
    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

MITRE ATT&CK Matrix

Tasks