Overview

overview

10

Static

static

10

4c8e045952...73.exe

windows7-x64

1

4c8e045952...73.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c8e0459524380a9f00ffc58913f461c3e1d8737dd18252881f09e2d416e4f73.zip

  • Size

    72KB

  • MD5

    3848117e149cad67c2fa556768fdbd0e

  • SHA1

    3f3e10834c45444895569b1aeef55c64ab55b4d4

  • SHA256

    8cb9b2cd62539fb22fb10f72f3f9b3a67daa78753717d77a254dae9f6fa1d03b

  • SHA512

    9daa5f63ba9a5cf7978cde82a2e91602ec6f41524d9161f34a284039b34b4084c8c4d28f6630d29c09d77a25fcb7af2935e3eeb11849ba0c6c5cba0fbe416eb6

  • SSDEEP

    1536:ETj/k9FfEcOw1aMTCgARrgZdDtOEBe2dfHmgGeeh3VkfXogRuYh/croMm0tw+X:EH/IO4AyERkZvdHrehifXxX+80tw+X

Score
10/10
crimsonrat

Malware Config

Extracted

Family

crimsonrat

C2

172.245.87.12

Signatures

  • CrimsonRAT main payload 1 IoCs
  • Crimsonrat family
    crimsonrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c8e0459524380a9f00ffc58913f461c3e1d8737dd18252881f09e2d416e4f73.zip
    .zip

    Password: infected

  • 4c8e0459524380a9f00ffc58913f461c3e1d8737dd18252881f09e2d416e4f73.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections