Overview
overview
10Static
static
10da298e4d09...78.zip
windows7-x64
1da298e4d09...78.zip
windows10-2004-x64
1oleObject1.exe
windows7-x64
10oleObject1.exe
windows10-2004-x64
10ppt\embedd...3.pptx
windows7-x64
1ppt\embedd...3.pptx
windows10-2004-x64
1ppt\vbaProject.doc
windows7-x64
1ppt\vbaProject.doc
windows10-2004-x64
1Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
12-12-2023 04:52
Behavioral task
behavioral1
Sample
da298e4d09a9e151c6bf60e8ebfdd8fc2e633d078c705db768e3284acdad0678.zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
da298e4d09a9e151c6bf60e8ebfdd8fc2e633d078c705db768e3284acdad0678.zip
Resource
win10v2004-20231127-en
Behavioral task
behavioral3
Sample
oleObject1.exe
Resource
win7-20231201-en
Behavioral task
behavioral4
Sample
oleObject1.exe
Resource
win10v2004-20231127-en
Behavioral task
behavioral5
Sample
ppt\embeddings\oleObject3.pptx
Resource
win7-20231130-en
Behavioral task
behavioral6
Sample
ppt\embeddings\oleObject3.pptx
Resource
win10v2004-20231130-en
Behavioral task
behavioral7
Sample
ppt\vbaProject.doc
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
ppt\vbaProject.doc
Resource
win10v2004-20231127-en
General
-
Target
oleObject1.exe
-
Size
16.9MB
-
MD5
55b3cfd78d9e2624d769acdfc5522753
-
SHA1
38a7f5b0ca7f508497bbfb42d32184b001367308
-
SHA256
504c7549caa901ca24a04915fe221236b3f41c947c7857c9d4634f3dbe31592e
-
SHA512
c1268ce97ad5c3f242ab78aeefb93fdbb06c693a149927240041c88db93ddb427d277459273b035263ae344da42044b3f449af0235310c547a437b14c869d608
-
SSDEEP
768:eaQjTpc2IVZM23zLnh8nLZ7FLOMaabW8FqZRGT7O:ZQjTpcpZM23PhqLZ7YmxY7c
Malware Config
Extracted
crimsonrat
204.44.124.81
Signatures
-
CrimsonRat
Crimson RAT is a malware linked to a Pakistani-linked threat actor.