Extracted

• • Target

    a0632cecfd478fbef1a69daae3d760041c6af2cc88965633d3837e076793cc82.xlam

  • Size

    3.4MB

  • MD5

    41d801d96c9e27c5ca6c4678ffa2d7e2

  • SHA1

    f8c6b5b4c520c2416bea015451cc8aca3283abe6

  • SHA256

    a0632cecfd478fbef1a69daae3d760041c6af2cc88965633d3837e076793cc82

  • SHA512

    58bfe64961ed881bb1489a5e298f4302d26568c770b5422aff36952514c33c91b588a000554e75581939b98185d2ca7681042e288215e8d62468f028bf8c847c

  • SSDEEP

    98304:Wal3ZM+KyXAQ5036pRV4sWWL4lxoeF35abXerDX6:dM+Kg503C74uL4XD8qK

  Score

  10^/10

  crimsonratrat

  • CrimsonRat

    Crimson RAT is a malware linked to a Pakistani-linked threat actor.

    ratcrimsonrat

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1