Overview

overview

10

Static

static

versioncheck.exe

windows7_x64

1

versioncheck.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    versioncheck.exe

  • Size

    1.3MB

  • Sample

    210106-6rw92yjmea

  • MD5

    c21e7fe8f255944c34ff7833a6c9b223

  • SHA1

    3c56fde8d279e0c545cd940c57700372ceeb1828

  • SHA256

    7654394bbdcc63d7ce5b825a87370e66d098e195af7b40abab5188744f94ac6e

  • SHA512

    28fde4d35f96e9475e09ba883d1bcfb6fa18a59b9b8f213c8866a73d997b6a0fe2d5b57bacf1da6d715238f8949d97209f07d584464125c753b1efa614454002

Score
10/10
remcosrat

Malware Config

Extracted

Family

remcos

C2

5.61.56.10:9004

Targets

    • Target

      versioncheck.exe

    • Size

      1.3MB

    • MD5

      c21e7fe8f255944c34ff7833a6c9b223

    • SHA1

      3c56fde8d279e0c545cd940c57700372ceeb1828

    • SHA256

      7654394bbdcc63d7ce5b825a87370e66d098e195af7b40abab5188744f94ac6e

    • SHA512

      28fde4d35f96e9475e09ba883d1bcfb6fa18a59b9b8f213c8866a73d997b6a0fe2d5b57bacf1da6d715238f8949d97209f07d584464125c753b1efa614454002

    Score
    10/10
    remcosrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks