S0115 - Crimson

Crimson is a remote access Trojan that has been used by Transparent Tribe since at least 2016

Author
agomez
Created
2023-08-14 15:59:14
Last updated
2026-02-07 19:02:00
Downloads
295753
Hostname indicators
2
Sample indicators
5

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

sub172.duckdns.org Hostname

modified 2026-10-16 23:37:21
Crimson RAT (ThreatFox Abuse.ch)

arvnd.duckdns.org Hostname

modified 2026-10-16 20:40:22
Crimson RAT (ThreatFox Abuse.ch)

164f7996b586499ba1ebdb8e10f5581e012025.xlam Sample

modified 2026-10-11 14:51:43
CrimsonRAT (MalwareBazaar Abuse.ch)

9b75e3e28f95345937f507b281e2a32a.exe Sample

modified 2026-10-09 07:35:41
Generic Malware (Hybrid-Analysis) · CrimsonRAT (MalwareBazaar Abuse.ch)

SecuriteInfo.com.BackDoor.CrimsonNET.14.26407.16542 Sample

modified 2026-10-08 23:45:08
CrimsonRAT (MalwareBazaar Abuse.ch)

SecuriteInfo.com.Win32.MalwareX-gen.25339.3415.exe Sample

modified 2026-10-08 18:07:01
CrimsonRAT (MalwareBazaar Abuse.ch) · Generic Malware (Hybrid-Analysis)

b4819738a277090405f0b5bbcb31d5dd3115f7026401e5231df727da0443332a.bin Sample

modified 2026-09-17 20:10:31
CrimsonRAT (MalwareBazaar Abuse.ch) · Generic.Malware (MalwareBazaar Abuse.ch)

SecuriteInfo.com.Win32.MalwareX-gen.22632.19376.exe Sample

modified 2025-05-08 04:01:08
CrimsonRAT (MalwareBazaar Abuse.ch) · Generic Malware (Hybrid-Analysis)

SecuriteInfo.com.Win32.MalwareX-gen.31399.5314.exe Sample

modified 2025-05-08 03:45:44
CrimsonRAT (MalwareBazaar Abuse.ch) · Generic Malware (Hybrid-Analysis)

bef8327c64ee14576b2f9a800d74b5a6.exe Sample

modified 2025-02-18 07:29:46
CrimsonRAT (MalwareBazaar Abuse.ch)

jivarthr edis.exe Sample

modified 2025-02-16 21:24:17
CrimsonRAT (MalwareBazaar Abuse.ch)

jivarthr edis.exe Sample

modified 2025-02-16 21:24:17
CrimsonRAT (MalwareBazaar Abuse.ch)

jivarthr edis.exe Sample

modified 2025-02-16 21:24:17
CrimsonRAT (MalwareBazaar Abuse.ch)