Analysis
-
max time kernel
123s -
max time network
116s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
16/02/2025, 20:17
General
-
Target
jivarthr edis.exe
-
Size
15.8MB
-
MD5
3a231bcc60569143aa899295e4a5ce8a
-
SHA1
8916cceb3f1b309d866bea10da41465baf720b00
-
SHA256
b5c8e2afa1091e9513da06cfaa1ceed25e091692cdfe7f304e367c58957e2d63
-
SHA512
849557a31b08576b1be102767dbdf182b3f914d71c25bd3a25cc0e5748c9942ec41f910276a5f51b3f100a432443f0490b7f2fc4f1d3bd79cd22ca66291dde0b
-
SSDEEP
1536:kAMDtajawvNhkim7VQe4tkYSWannmvZLVWn3M:PdPkim7VQjtkqnD83
Score
10/10
Malware Config
Extracted
Family
crimsonrat
C2
209.127.18.107
101.125.206.108
Signatures
-
CrimsonRat
Crimson RAT is a malware linked to a Pakistani-linked threat actor.
-
Crimsonrat family
Processes
-
C:\Users\Admin\AppData\Local\Temp\jivarthr edis.exe"C:\Users\Admin\AppData\Local\Temp\jivarthr edis.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
15.8MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB