General

  • Target

    5158c5c17862225a86c8a4f36f054ae2_JaffaCakes118

  • Size

    428KB

  • Sample

    240717-ecltbaxeja

  • MD5

    5158c5c17862225a86c8a4f36f054ae2

  • SHA1

    6da27200f473f8c55bb125f68314eecb2219c3dd

  • SHA256

    b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806

  • SHA512

    c006f8ce77ef7dc150f137bb876a31e8f62f58e8337f487bab17752aa9eea95070e78b791488f36a2d152a871533a8bb9ee601f0053d1a2256d9e3cec3e7fe75

  • SSDEEP

    6144:LxEtjPOtioVjDGUU1qfDlavx+W2QnAHBM:B

Malware Config

Extracted

Family

crimsonrat

C2

142.234.201.80

Targets

    • Target

      5158c5c17862225a86c8a4f36f054ae2_JaffaCakes118

    • Size

      428KB

    • MD5

      5158c5c17862225a86c8a4f36f054ae2

    • SHA1

      6da27200f473f8c55bb125f68314eecb2219c3dd

    • SHA256

      b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806

    • SHA512

      c006f8ce77ef7dc150f137bb876a31e8f62f58e8337f487bab17752aa9eea95070e78b791488f36a2d152a871533a8bb9ee601f0053d1a2256d9e3cec3e7fe75

    • SSDEEP

      6144:LxEtjPOtioVjDGUU1qfDlavx+W2QnAHBM:B

    Score
    10/10
    • CrimsonRAT main payload

    • CrimsonRat

      Crimson RAT is a malware linked to a Pakistani-linked threat actor.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks