crimsonrat | b5c8e2afa1091e9513da06cfaa1ceed25e091692cdfe7f304e367c58957e2d63 | Triage

Sharing

General

Target

b5c8e2afa1091e9513da06cfaa1ceed25e091692cdfe7f304e367c58957e2d63.exe
Size

15.8MB
Sample

250217-epbtwazlbs
MD5

3a231bcc60569143aa899295e4a5ce8a
SHA1

8916cceb3f1b309d866bea10da41465baf720b00
SHA256

b5c8e2afa1091e9513da06cfaa1ceed25e091692cdfe7f304e367c58957e2d63
SHA512

849557a31b08576b1be102767dbdf182b3f914d71c25bd3a25cc0e5748c9942ec41f910276a5f51b3f100a432443f0490b7f2fc4f1d3bd79cd22ca66291dde0b
SSDEEP

1536:kAMDtajawvNhkim7VQe4tkYSWannmvZLVWn3M:PdPkim7VQjtkqnD83

Score

10^/10

crimsonrat discovery rat

Malware Config

Extracted

Family

crimsonrat

C2

209.127.18.107

101.125.206.108

Targets

- Target
  
  b5c8e2afa1091e9513da06cfaa1ceed25e091692cdfe7f304e367c58957e2d63.exe
- Size
  
  15.8MB
- MD5
  
  3a231bcc60569143aa899295e4a5ce8a
- SHA1
  
  8916cceb3f1b309d866bea10da41465baf720b00
- SHA256
  
  b5c8e2afa1091e9513da06cfaa1ceed25e091692cdfe7f304e367c58957e2d63
- SHA512
  
  849557a31b08576b1be102767dbdf182b3f914d71c25bd3a25cc0e5748c9942ec41f910276a5f51b3f100a432443f0490b7f2fc4f1d3bd79cd22ca66291dde0b
- SSDEEP
  
  1536:kAMDtajawvNhkim7VQe4tkYSWannmvZLVWn3M:PdPkim7VQjtkqnD83
Score

10^/10

crimsonrat rat discovery
- CrimsonRat
  Crimson RAT is a malware linked to a Pakistani-linked threat actor.
  rat crimsonrat
- Crimsonrat family
  crimsonrat
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

crimsonratdiscoveryrat