SecuriteInfo.com.BackDoor.CrimsonNET.14.26407.16542

Classification: Malicious

SecuriteInfo.com.BackDoor.CrimsonNET.14.26407.16542 is a malicious file sample. Linked to Crimson malware. Reported by 1 threat source, last seen 2023-12-22.

Detection summary

  • 53 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CRIMSON (S0115)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
CrimsonRAT MalwareBazaar Abuse.ch 2023-12-22 07:19:32 2023-12-22 07:19:32 malicious-activity S0115 Crimson

Sample information

Filenames
SecuriteInfo.com.BackDoor.CrimsonNET.14.26407.16542
File type
application/x-dosexec
MD5
b4008dc1b878578905f1a01d2938c8ea
SHA-1
2f7fd3f24c7ff9aaab6a22a15cb5951adc80958b
SHA-256
503d4b9bd0a158dbfd9179ac51341404f32f9fc1765d375f4c92eb7d0ed8ba18
First indexed
2023-12-22 08:19:39
Last updated
2025-04-15 04:03:24

Antivirus detections

EngineDetection
ALYacGen:Variant.Lazy.451217
AVGWin32:TrojanX-gen [Trj]
AhnLab-V3Malware/Win.AGEN.C5561522
AlibabaTrojan:MSIL/Finac.2058367d
Antiy-AVLTrojan/MSIL.Finac
ArcabitTrojan.Lazy.D6E291
AvastWin32:TrojanX-gen [Trj]
AviraTR/Spy.Gen
BitDefenderGen:Variant.Lazy.451217
BkavW32.AIDetectMalware.CS
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebBackDoor.CrimsonNET.14
ESET-NOD32a variant of MSIL/Agent.DUB
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Lazy.451217 (B)
F-SecureTrojan.TR/Spy.Gen
FireEyeGen:Variant.Lazy.451217
GDataGen:Variant.Lazy.451217
GoogleDetected
IkarusTrojan.MSIL.Agent
K7AntiVirusTrojan ( 0058eb4e1 )
K7GWTrojan ( 0058eb4e1 )
KasperskyHEUR:Trojan.MSIL.Finac.gen
KingsoftMSIL.Trojan.Finac.gen
LionicTrojan.Win32.Finac.4!c
MaxSecureTrojan.Malware.210054105.susgen
McAfeeArtemis!B4008DC1B878
McAfeeDti!503D4B9BD0A1
MicroWorld-eScanGen:Variant.Lazy.451217
MicrosoftBackdoor:Win32/Multiverze
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingTrojan.Finac!8.17AF8 (CLOUD)
SentinelOneStatic AI - Malicious PE
SkyhighArtemis
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.11ba2950
Trapminesuspicious.low.ml.score
TrendMicroTROJ_GEN.R002C0XGJ24
TrendMicro-HouseCallTROJ_GEN.R002C0XGJ24
VBA32TScope.Trojan.MSIL
VIPREGen:Variant.Lazy.451217
VaristW32/ABRisk.PGLB-1174
VirITTrojan.Win32.Genus.USO
WebrootW32.Trojan.Gen
ZillyaTrojan.Agent.Win32.3790014
ZoneAlarmHEUR:Trojan.MSIL.Finac.gen
alibabacloudTrojan:MSIL/Finac.gen
huorongTrojan/MSIL.Agent.fs