General

  • Target

    0d8eeacca6e4a8237f17da724b237da2

  • Size

    9.7MB

  • MD5

    0d8eeacca6e4a8237f17da724b237da2

  • SHA1

    1b0e8bb4f86aa1c8126019faafd2c68f7ac13d52

  • SHA256

    67a225feedc5ce4adf75acb41e8b0e746e7daaec779225cd72f860a263b92a6e

  • SHA512

    89175b826866b0e3ca3c4644f5cae591fa7645c1c0459eda35c76335fb8e78c3282918a65a1f5444409fa26992514cdbce58595b2557946ff0bf8fa4a28d6ecd

  • SSDEEP

    768:MrU9U8h/WdxIXjVyTT+DHmcpvA0Mi6cO:M4nh+dYy/Mrvk

Score
10/10

Malware Config

Extracted

Family

crimsonrat

C2

191.101.172.44

215.240.250.102

Signatures

  • CrimsonRAT main payload 1 IoCs
  • Crimsonrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d8eeacca6e4a8237f17da724b237da2
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections