Analysis
-
max time kernel
118s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
10-12-2023 22:27
General
-
Target
0x0006000000016d66-197.exe
-
Size
16.9MB
-
MD5
55b3cfd78d9e2624d769acdfc5522753
-
SHA1
38a7f5b0ca7f508497bbfb42d32184b001367308
-
SHA256
504c7549caa901ca24a04915fe221236b3f41c947c7857c9d4634f3dbe31592e
-
SHA512
c1268ce97ad5c3f242ab78aeefb93fdbb06c693a149927240041c88db93ddb427d277459273b035263ae344da42044b3f449af0235310c547a437b14c869d608
-
SSDEEP
768:eaQjTpc2IVZM23zLnh8nLZ7FLOMaabW8FqZRGT7O:ZQjTpcpZM23PhqLZ7YmxY7c
Score
10/10
Malware Config
Extracted
Family
crimsonrat
C2
204.44.124.81
Signatures
-
CrimsonRat
Crimson RAT is a malware linked to a Pakistani-linked threat actor.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0006000000016d66-197.exe"C:\Users\Admin\AppData\Local\Temp\0x0006000000016d66-197.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.9MB
-
Filesize
16.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB