Search/Crimson
● Malware

Crimson

Crimson is a remote access Trojan that has been used by Transparent Tribe since at least 2016.

View graph Watch Export
Indicators tracked
0
Intelligence Reports20
20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
61 relationships
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1056.001: Keylogging
source
T1123: Audio Capture
source
T1025: Data from Removable Media
source
T1114.001: Local Email Collection
source
T1120: Peripheral Device Discovery
source
T1082: System Information Discovery
source
T1091: Replication Through Removable Media
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1497.003: Time Based Checks
source
T1112: Modify Registry
source
T1555.003: Credentials from Web Browsers
source
T1125: Video Capture
source
T1016: System Network Configuration Discovery
source
T1083: File and Directory Discovery
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1547.001: Registry Run Keys / Startup Folder
source
T1095: Non-Application Layer Protocol
source
T1012: Query Registry
source
T1614: System Location Discovery
source
T1518.001: Security Software Discovery
source
T1059.003: Windows Command Shell
source
T1070.004: File Deletion
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1680: Local Storage Discovery
source
T1124: System Time Discovery
source