Extracted

• • Target

    f1b61e942e02bf9d3ba3373d34fb69a925fa4bbb25dda27286996dc71979423d

  • Size

    625KB

  • MD5

    efd3d1d5e1b815fd868f68d112b3394f

  • SHA1

    1e354b9180d20b2a3c3632caa3bec5ffbb8b7dfe

  • SHA256

    f1b61e942e02bf9d3ba3373d34fb69a925fa4bbb25dda27286996dc71979423d

  • SHA512

    362fa00ffea6d3f604bf465a9c05046ea53c8c25a03018d2b7fc00fdbd646f98d230e9516c04b6a1b5362a4e7bb64edd3fa4c0516f0ae81704d38892c35bbef7

  • SSDEEP

    6144:QZ+RwPONXoRjDhIcp0fDlavx+W26nA5knQ:4n

  Score

  10^/10

  crimsonratdiscoverypersistencerat

  • CrimsonRAT main payload

  • CrimsonRat

    Crimson RAT is a malware linked to a Pakistani-linked threat actor.

    ratcrimsonrat

  • Crimsonrat family

    crimsonrat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2