It's Crimson RAT module downloader.
C2:
93.104.214.103:8414Please, don't post 2 samples in the same post if they are not related to...
BR,
Antelox
A forum for reverse engineering, OS internals and malware analysis
93.104.214.103:8414Please, don't post 2 samples in the same post if they are not related to...