Rule Info
Name
MAL_Crimson_RAT_Jun26
Author
MalGamy
Description
Detects Crimson RAT written in C# which is used for remote access capabilities and data exfiltration features, seen being used by SideCopy APT group
Score
80
Date
2026-06-17
Minimum Yara
3.5.0
Rule Hash
484ebaa7529f6d2b0a5fe29f51e10267
Tags
['EXE', 'FILE', 'G1008', 'T1020', 'MAL']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
9
Suspicious (< 10 engines)
0
Clean (0 engines)
0
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR