crimsonrat | ac8e713b699fd019b67cbaca58cc35738e05b3308c5abda28656a3097cb4c672 | Triage

Sharing

General

Target

bffe4ad80bca5fde40911ec90cb10616_JaffaCakes118
Size

9.4MB
Sample

241204-ay8sraxrfr
MD5

bffe4ad80bca5fde40911ec90cb10616
SHA1

bdcdccea99540f05f6ed37e5b948335ba9077db5
SHA256

ac8e713b699fd019b67cbaca58cc35738e05b3308c5abda28656a3097cb4c672
SHA512

008ca396b4a2f3fee3971b6207b01b8c4a9f4b7de8cff9de017618d5994696734dc67c21d4cf64606ea47836087bf46558a33eb37af1799e6bec7927100e1b65
SSDEEP

768:gY6ouDBEyfsvPYDe85PzZ3W9q74CkOoV4WnNv98knMLGsG:gY6ouBCvPYXA44NlvsG

Score

10^/10

crimsonrat discovery

Malware Config

Extracted

Family

crimsonrat

C2

134.119.181.15

Targets

- Target
  
  bffe4ad80bca5fde40911ec90cb10616_JaffaCakes118
- Size
  
  9.4MB
- MD5
  
  bffe4ad80bca5fde40911ec90cb10616
- SHA1
  
  bdcdccea99540f05f6ed37e5b948335ba9077db5
- SHA256
  
  ac8e713b699fd019b67cbaca58cc35738e05b3308c5abda28656a3097cb4c672
- SHA512
  
  008ca396b4a2f3fee3971b6207b01b8c4a9f4b7de8cff9de017618d5994696734dc67c21d4cf64606ea47836087bf46558a33eb37af1799e6bec7927100e1b65
- SSDEEP
  
  768:gY6ouDBEyfsvPYDe85PzZ3W9q74CkOoV4WnNv98knMLGsG:gY6ouBCvPYXA44NlvsG
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2