General

  • Target
    dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
  • Size 790KB
  • Sample240410-rtcyysec2w
  • SHA256 dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • crimsonrat

C2
  • 151.106.14.125

  • 211.210.122.154

Targets

    • Target
      dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
    • Size 790KB
    • SHA256 dbb9168502e819619e94d9dc211d5f4967d8083ac5f4f67742b926abb04e6676
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • CrimsonRAT main payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks