Overview

overview

10

Static

static

drivers_check.exe

windows7_x64

1

drivers_check.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    drivers_check.exe

  • Size

    1.4MB

  • Sample

    210101-qw3stjsds2

  • MD5

    46580314ad41ee9c33eea70fd336f9d1

  • SHA1

    0f27e8e24c40de4df8d6f50634c7aba117679f7a

  • SHA256

    46f9b3a73b2ef17c7ace714e6b69b02e444096fb395d85e3b3220ed13d060a48

  • SHA512

    f160f04a9104eff461122393c62a9a3f963eea47e50b7464787db6212db2ec06ba295e122ac085653b95d224dd23504de98a05733b2d5b97e44fc36d4b5a3c27

Score
10/10
remcosrat

Malware Config

Extracted

Family

remcos

C2

5.61.56.10:9003

Targets

    • Target

      drivers_check.exe

    • Size

      1.4MB

    • MD5

      46580314ad41ee9c33eea70fd336f9d1

    • SHA1

      0f27e8e24c40de4df8d6f50634c7aba117679f7a

    • SHA256

      46f9b3a73b2ef17c7ace714e6b69b02e444096fb395d85e3b3220ed13d060a48

    • SHA512

      f160f04a9104eff461122393c62a9a3f963eea47e50b7464787db6212db2ec06ba295e122ac085653b95d224dd23504de98a05733b2d5b97e44fc36d4b5a3c27

    Score
    10/10
    remcosrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks