Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 12:23

General

  • Target

    87f51b4632c5fbc351a59a234dfefef506d807f2c173aac23162b85d0d73c2ad.exe

  • Size

    9.1MB

  • MD5

    64261d5f3b07671f15b7f10f2f78da3f

  • SHA1

    d4f978177394024bb4d0e5b6b972a5f72f830181

  • SHA256

    87f51b4632c5fbc351a59a234dfefef506d807f2c173aac23162b85d0d73c2ad

  • SHA512

    3a9ff39e6bc7585b0b03f7327652e4c3b766563e8b183c25b6497e30956945add5684f1579862117e44c6bac2802601fc7c4d2a0daa1824f16c4da1fd6c9c91a

  • SSDEEP

    768:nK6i7INFzKMNDOrt1Ln84KcN5jv7tLoQOoAdIERGo:K6C6PDEtN84PjSQOo2IeG

Score
10/10

Malware Config

Extracted

Family

crimsonrat

C2

185.136.161.124

Signatures

  • CrimsonRat

    Crimson RAT is a malware linked to a Pakistani-linked threat actor.

Processes

  • C:\Users\Admin\AppData\Local\Temp\87f51b4632c5fbc351a59a234dfefef506d807f2c173aac23162b85d0d73c2ad.exe
    "C:\Users\Admin\AppData\Local\Temp\87f51b4632c5fbc351a59a234dfefef506d807f2c173aac23162b85d0d73c2ad.exe"
    1⤵
      PID:2880

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2880-0-0x0000000000230000-0x0000000000B44000-memory.dmp

      Filesize

      9.1MB

    • memory/2880-1-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

      Filesize

      9.9MB

    • memory/2880-2-0x000000001BAD0000-0x000000001BB50000-memory.dmp

      Filesize

      512KB

    • memory/2880-3-0x000007FEF5710000-0x000007FEF60FC000-memory.dmp

      Filesize

      9.9MB

    • memory/2880-4-0x000000001BAD0000-0x000000001BB50000-memory.dmp

      Filesize

      512KB