General
- Target dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
- Size 790KB
- Sample240410-rtcyysec2w
- SHA256 dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
- MD5 c7a3276763a5c1b13f93028aab5a6e73
- SHA1 c2844b69a36b3be37f8db97b0afc051f6bf36671
- SHA512 2ef8d3eb3f1368591666d9f85dddb210c05fe16569f3553086f42d7b82133669c5a9e7fe1263407bb54bb9f75216ef9fcb78348427e334ef74afd6e3f429c01a
- SSDEEP 3072:PkWc08tG41FHiopEomJ9/GuloC5pUAn0YoKpbqZSvYYzU6lXHaym97m/EE3fzLvd:PkA
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676.doc
Resource
win7-20240221-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676.doc
Resource
win10v2004-20240226-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
crimsonrat
C2
-
151.106.14.125
-
211.210.122.154
Targets
-
- Target dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
- Size 790KB
- SHA256 dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
- MD5 c7a3276763a5c1b13f93028aab5a6e73
- SHA1 c2844b69a36b3be37f8db97b0afc051f6bf36671
- SHA512 2ef8d3eb3f1368591666d9f85dddb210c05fe16569f3553086f42d7b82133669c5a9e7fe1263407bb54bb9f75216ef9fcb78348427e334ef74afd6e3f429c01a
- SSDEEP 3072:PkWc08tG41FHiopEomJ9/GuloC5pUAn0YoKpbqZSvYYzU6lXHaym97m/EE3fzLvd:PkA
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
CrimsonRAT main payload
-
Executes dropped EXE
-
Loads dropped DLL