CrimsonRAT SHA-256
0335de8eadbbd5dc7cbe92ef869bcea6f6596ac39a38680142c982ec6e97ecde - TROJ_FRS.0NA103EE21
1b36599fe98c0fa9a417d4c8527eb3b2a6b83c39e79096c3ba7cca258e986f94 - Backdoor.MSIL.CRIMSONRAT.L
8CB542F5793279B8A11AF28E9352F41D400856A28E40ED1DAA323B47F9EA3E3C - AndroidOS_MobileSpy.NGPA
87f51b4632c5fbc351a59a234dfefef506d807f2c173aac23162b85d0d73c2ad - Backdoor.MSIL.CRIMSONRAT.YXBF4Z 
93f33e4e9a732de665510aa5fdc565fc00bcf5e28101c5cc55b5b16f94288b8a - N/A
a168f0d23858657671ade1a151551dade4ee9d1f91e42fe40b614a456681d849 - Backdoor.MSIL.CRIMSONRAT.L
e75eb656871bff48794c06f3c34cebc6238436229cd2c8ecebde7cdebebf0e0d - Backdoor.MSIL.CRIMSONRAT.L
---------------------------------------------
CrimsonRAT IP Addresses
209[.]127[.]19[.]241[:]10284  - Android RAT C&C server
185[.]136[.]161[.]124 - Crimson RAT C&C server 
---------------------------------------------
AndroRAT and CapraRAT SHA-256
d9979a41027fe790399edebe5ef8765f61e1eb1a4ee1d11690b4c2a0aa38ae42 - AndroidOS_Androrat.HRXD
51a6ca006305c9a0e83b462b1198241e842ef98aa2b78c918c422ed48c70bf75 - AndroidOS_Androrat.MLA
83d75ff6063050305b86413d2e265b9458a9542743d357e61338107fb20a9416 - AndroidOS_AndroRat.MSA
1b9cc0d92fdd6fcfa10d721300c873a9d5fb50ecea03e8a80e37f40cc0af0c22 - AndroidOS_CapraRAT.CT
d62705186c488bb26fccdb1404931223a887004fd6704ac1483e599a15e92792 - AndroidOS_CapraRAT.CT
83a4718fd650f78bf1aed4a5eb560950aab8bc2ea432598402c38568f7e462ab - AndroidOS_CapraRAT.CT
8304a6d1410629d7bc79b78f7f719530be0be764a4e0527bb3a3cf456ce2036a - AndroidOS_CapraRAT.CT
4ce9fee0295cbb745c37e0f1da085ef500159b5bd9e5ec8c986e9cce38882c50 - AndroidOS_CapraRAT.CT
6478764346de677ed2a6f8c54daad96b6bdccb96449787c1db66a32f62175756 - AndroidOS_CapraRAT.CT
c90b3f9f0b226857fa8ec270032f4f1595579e9487e87a3ecad714a1205695f4 - AndroidOS_CapraRAT.CT
136cbcacf832aca13f7a9ec442079b1a504a6d3d3f720c6fec547f855ae08cea - AndroidOS_CapraRAT.CT
a78d9964db54d2430644a4cd6b2f3640f91f6aa282e5591435b4e652897aa30f - AndroidOS_CapraRAT.CT
0463363b4f3f452aaf2bee4f864f4db851e4fa803446fc3e141b772fb1d8fe48 - AndroidOS_CapraRAT.CT
ba8d242b784bab8b450b34fcf7c60f1d9bfbb7dc7d98b52502f3672fbe049d68 - AndroidOS_CapraRAT.CT
319140d52c310dc1642aa972586997e73c73c46a5227f7ecf176bcdaefd7266f - AndroidOS_CapraRAT.CT
22c8a08107622ec75c7d5a9d177a665cd914182cf36288270e737832b76e4012 - AndroidOS_CapraRAT.CT
00f9f51505658a8d007907e234fc112034c620b0dfeaec95aa19188b6644dffd - AndroidOS_CapraRAT.CT
a0fb5419f7fb9718a721712dbd24c1edbff3b64db93fe809136dc5ff6193f13b - AndroidOS_CapraRAT.CT
09735ba9d19aa5ad79deed47008fb528ac8ae5c2a8f91f4bba35d8079059ad21 - AndroidOS_CapraRAT.CT
11bc9fb270769dd57b046541a84c28821546594c9c6a7000c3917b994a592740 - AndroidOS_CapraRAT.CT
dd16ed0d8ee0011042f3447f44816c8098808fd58e0eddadd644c730a1176f36 - AndroidOS_CapraRAT.CT
ac7874792f81476704ca91519efb75d313b01f087a64e82c9eed7984b74e3e5f - AndroidOS_CapraRAT.CT
ed380756ba34416db2ac117791ef0e1ea0c41cfaa0966a6ecde8d92bd2763ee9 - AndroidOS_CapraRAT.CT
2be3c42c1a6094764e5c4e6abfb7afdd71c935a3431094b4be8723812a064f37 - AndroidOS_CapraRAT.CT
35b2f67a5e452b68bfcbbb43289fcb04e15da5efc043ff2eb1b93145c027dfe6 - AndroidOS_CapraRAT.CT
a76a1771d106a83adb3bb1cc2bad1cf8a9f774d586fc764511297ed6157c44e8 - AndroidOS_CapraRAT.CT
350c4b3ec14629a942d3abc4e8a711f88fbf50ea55970c8f047653c16dae581c - AndroidOS_CapraRAT.CT
bbd12bd5eaabed07f670a8fe681ec52705a45ddb7e4f9f2b304188e62d25294d - AndroidOS_CapraRAT.CT
18029be2b0bf5284713f9cf61ba5e160ae10a581f346fdd396065d5728906768 - AndroidOS_CapraRAT.CT
396a46e9595fe6bdae709ab3171900ebd4fd1c6e1cd8ad94d17d2dcacb6bf6b6 - AndroidOS_CapraRAT.CT
1c9024f2d696f949091be27aced113f4e98bc46c0580eb93e644a51b269c76e4 - AndroidOS_CapraRAT.CT
7862eae57c6555f838fd09a5b95a31a2011b992e9a2ba49e3c6b259b1c315429 - AndroidOS_CapraRAT.CT
8c867aeb8b8411e3487af4a030845d66c70a85934f460611a8637e67bbc5434a - AndroidOS_CapraRAT.CT
96102f8e48ed9c2ae8f58b005a82c1f19d30bd110d8009414974fe5d99087950 - AndroidOS_CapraRAT.CT
a3c483f20a5a70ff6e7c9c8b8d0476e4d6a6ff3a77179e136169b58aedfb31be - AndroidOS_CapraRAT.CT
84c2d61e083fa5f9c8118738c4c0bebc15de31d6f9cf416f9cced7aef6aecc56 - AndroidOS_CapraRAT.CT
d723869a8f5ffdc9c60539b5358ba9d284e22ee0e5007410f5844946871744c9 - AndroidOS_CapraRAT.CT
d3fb855cccb4fe347d142c48266d8f5395595462c751c9a70db58efc5b0335fe - AndroidOS_CapraRAT.CT
80d6be8218cfc1545bb036a679ae28c9b3fcb34b7de980c5a255abc4fe35a453 - AndroidOS_CapraRAT.CT
be91ae324b338d8cef69b3f56ed44c2447fe9dcf1da52e71e3fdfa6c77f1dea2 - AndroidOS_CapraRAT.CT
0602df185fd259231d4041f7b6f8c1472f911b660f242f69b17da98e2535f5c2 - AndroidOS_CapraRAT.CT
874b1ef11c72dcc18f6eca31b80dc63203aebf5416247b4c429f6a74b57ac37b - AndroidOS_CapraRAT.CT
e28059072fe6c8269c0cba48d63fa39915f6075cd25031d8bbcc1eeb1ba7226c - AndroidOS_CapraRAT.CT
f908923d7248c8639c18ade4d4b2a32d0faee2ca5c6a241593a99f656b72d5bf - AndroidOS_CapraRAT.CT
e5f23ea7a7d4d5850e25500a3d686db8598106d42f2d565e3c2cffce2daea9ab - AndroidOS_CapraRAT.CT
e54aa0d51716c129bf67df682c959362117dfd67f5bcf0b767059816e73ab7e6 - AndroidOS_CapraRAT.CT
e393efe4e9566a9f9f6fb9f9b115c18297aac298bd66c426b52a1b059f89cbef - AndroidOS_CapraRAT.CT
1a425c66fb788af65d9455c8ecaab42c2b48a19b09901ba8fd9a85f93d637fa7 - AndroidOS_CapraRAT.CT
065ac185eebacd9dc3b0a457eb17535d48d5ea26de6839cac2ca6a771fbcaac6 - AndroidOS_CapraRAT.CT
3fa4c9531ee15d3eae49f5d13aa3308ece77be747ee00198f8cfdf46c81cbb3b - AndroidOS_CapraRAT.NGP
a9309189d6b0fc07143ce2a871a85ba017750006ca6727be16329f7a3ef6da27 - AndroidOS_CapraRAT.NGP
b48c3cb304aac4fa4ca9aa9eb6a90463d343d6abe985a0b0beca175937f2e91c - AndroidOS_CapraRAT.NGP
4a951bf2eaf75a5c3437f8255ed7707511f303984becdadcaa4151e8de0f9e90 - AndroidOS_CapraRAT.NGP
db54820a956615536550e4f78085f23be65bc796d0a636632c9a328a50d97e20 - AndroidOS_CapraRAT.NGP
8e56fb851e4bbda3005e72c4312f64a89ca1e53892b2060c452615ad3fd6b698 - AndroidOS_CapraRAT.NGP
c346d7cc8dbc2f06aed5821ecb5490fb258749961c4f2b4a491599146e422b93 - AndroidOS_CapraRAT.NGP
61afe61b5e5e7a74c00962142241caae6d4e5d44d97095b812624dae50d7f129 - AndroidOS_CapraRAT.NGP
1ac82cc23419b035bbbe5112409198e8b7b27be4d81337550cf3c0089370446c - AndroidOS_CapraRAT.NGP
bb553e2e8bfc4bebb21552ed1068565f9609ad5dcc8fea58dc0ff1082c775df5 - AndroidOS_CapraRAT.NGP
6e0a12cdd778951163ccf481ffb2fc3724b382e4ca8e941b7dfdd8b0f8375cb3 - AndroidOS_CapraRAT.NGP
18463da5cf780724c302a26703f59a75da279cdb035650fafcea048618805681 - AndroidOS_CapraRAT.NGP
af9e87c3cd2f99993548a9a9cfcc0b3df7b45626448fe0065ef88595688c50d3 - AndroidOS_CapraRAT.NGP
2259c89d2c5e1d8324f075135b03492f393860b9911855e84f50ed6b3699ac4d - AndroidOS_CapraRAT.NGP
1ca07e066880859cc6b67ba73e1dfc599751fc3ac356d43ef85520536473b384 - AndroidOS_CapraRAT.NGP
8153cde5c62679afc8f230dbb19d66b1724f4c4fefa68b5c92994ab42fe293de - AndroidOS_CapraRAT.NGP
8cb542f5793279b8a11af28e9352f41d400856a28e40ed1daa323b47f9ea3e3c - AndroidOS_CapraRAT.NGP
afc9fbb1ff8cfdd79a781bf493dc426bb059916debbb98c1b7c20a9d0f24a5f7 - AndroidOS_CapraRAT.NGP
7654dc94bca98e9811eff54d8fc44d1da6c6377132dded797e31e41d6f57edfa - AndroidOS_CapraRAT.NGP
a707d3f235eb1a5d37bfe88e4abb9996e9c140bc32aead9a1840e152313d5412 - AndroidOS_HiddenApp.SAB
1743a96aad7ffb3e4ec74178c7baa2a38c683c7fb8ff319b218b8e4799c496b0 - AndroidOS_HiddenApp.SAB
---------------------------------------------
ObliqueRat SHA-256
0196bc9ac3db6f02cfa97323c8fce6cc7318b8f8fadb3e73bdf7971b3c541964 - Trojan.W97M.OBLIQUERAT.A
4c37919f17fe43cfb68d5ef2291bb3f44afe5850b1ee4a2fa48834cb0ed2c997 - Downloader of malicious Word document 
553502bfe265a7e75a1d2202776fd816cabccfcdb200cc180dc507f4d45668d2 - Encrypted ObliqueRat malware - TROJ_FRS.VSNTAK22 
---------------------------------------------
ObliqueRat Downloader URLs 
 
hxxps://sharingmymedia[.]com/files/1More-details[.]doc
hxxps://sharingmymedia[.]com/files/Criteria-of-Army-Officers[.]doc
hxxps://sharingmymedia[.]com/files/7All-Selected-list[.]xls
hxxp://iiaonline[.]in/sasha[.]jpg
hxxp://iiaonline[.]in/timon[.]jpeg
hxxp://iiaonline[.]in/DefenceLogo/theta[.]bmp