Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
10-10-2023 18:14
Behavioral task
behavioral1
Sample
oleObject1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
oleObject1.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
oleObject2.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
oleObject2.exe
Resource
win10v2004-20230915-en
General
-
Target
oleObject2.exe
-
Size
11.9MB
-
MD5
1d493e326d91c53e0f2f4320fb689d5f
-
SHA1
e8b470e808fab757e685ee2bf8b677cd3fd082cd
-
SHA256
a833dbdc5c2113da51bf778351834682bc6220461394050e04592cd9096e0aba
-
SHA512
9e5d16935b46caf3b729d2fd4cca25d06fbcca737016adfe57188cfa1d5ca5153ee6a81c9267e3f9ab7f377e2388c6110b8908a717462f950f77386b21dc49d7
-
SSDEEP
49152:YxPpTFk3gJ/Jc/fzD0987HIT3MXgf1cH+IBShnd2s+IjsfAuMm:YNpTFkQ5Jc/LDuEHwCgr0ShYlIqP
Malware Config
Extracted
crimsonrat
162.245.191.217
Signatures
-
CrimsonRat
Crimson RAT is a malware linked to a Pakistani-linked threat actor.