General
-
Target
juicewrld.jpeg
-
Size
152KB
-
Sample
250317-a6378syjv4
-
MD5
5252a0128845849d952cec74c84cbee7
-
SHA1
2c5fce854b92be89c8ac62ba8ae136cdd1029307
-
SHA256
dafa62260b8f61cb5d22c73cdc74c43a8c427bc28de420fb33a08f0f312b0b6d
-
SHA512
416e886bdf9072682c070a7ef8cfa400815807c8711242e55fc7dd27628156f84cd31fa8c6b66767de4e399cdf5b7c7a139add6180a64ac9f7ff944c79d4a02e
-
SSDEEP
3072:SMLL+MWEsIWEovj1GIliHyAHTZ5Vh2sVlv/+Ho8y+H:SM1WEiUI27Vwsrv/s3H
Static task
static1
Behavioral task
behavioral1
Sample
juicewrld.jpg
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
juicewrld.jpg
Resource
win10v2004-20250314-en
Malware Config
Extracted
crimsonrat
185.136.161.124
Targets
-
-
Target
juicewrld.jpeg
-
Size
152KB
-
MD5
5252a0128845849d952cec74c84cbee7
-
SHA1
2c5fce854b92be89c8ac62ba8ae136cdd1029307
-
SHA256
dafa62260b8f61cb5d22c73cdc74c43a8c427bc28de420fb33a08f0f312b0b6d
-
SHA512
416e886bdf9072682c070a7ef8cfa400815807c8711242e55fc7dd27628156f84cd31fa8c6b66767de4e399cdf5b7c7a139add6180a64ac9f7ff944c79d4a02e
-
SSDEEP
3072:SMLL+MWEsIWEovj1GIliHyAHTZ5Vh2sVlv/+Ho8y+H:SM1WEiUI27Vwsrv/s3H
Score10/10-
CrimsonRAT main payload
-
Crimsonrat family
-
Downloads MZ/PE file
-
Legitimate hosting services abused for malware hosting/C2
-