Overview

overview

10

Static

static

10

2936-755-0...ry.exe

windows7-x64

2936-755-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2936-755-0x00000000000C0000-0x00000000009D4000-memory.dmp

  • Size

    9.1MB

  • MD5

    f1c7a9b7f53404467e78a210f820d1ac

  • SHA1

    e9ffd8b38ef44f14d4a7f47c04b7adc24238be6d

  • SHA256

    1a09e746ed4b33944574afd5af970f47ba6ceb41f6f435a13b057e78436ebbd0

  • SHA512

    b7aef7b67b30cdb3eb8f8fc771573ccdbf7a74433e649bb38c10f2ea3544a1e36747afeef35c02f4166d8e51b8a34ce04eb41c2a03b136f3061d53944d4a81b3

  • SSDEEP

    768:oK6i7INFzKMNDOrt1Ln84KcN5jv7tL8QOoAdIERGo:t6C6PDEtN84PjeQOo2IeG

Score
10/10
crimsonrat

Malware Config

Extracted

Family

crimsonrat

C2

185.136.161.124

Signatures

  • CrimsonRAT main payload 1 IoCs
  • Crimsonrat family
    crimsonrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2936-755-0x00000000000C0000-0x00000000009D4000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections