Overview

overview

10

Static

static

0908870000...00.exe

windows7_x64

10

0908870000...00.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    090887000008000000.exe
  • Size 573KB
  • Sample210111-5xt2kwr3d6
  • SHA256 5245ed24d76b45f0d9de8c7ce2a7665ded270b8ba7d6b29191e8592630c19b97
  • MD5 SHA1 SHA512
Score
10/10
remcosrat

Malware Config

Extracted

Family

  • remcos

C2

  • 45.137.22.52:8780

Targets

    • Target
      090887000008000000.exe
    • Size 573KB
    • SHA256 5245ed24d76b45f0d9de8c7ce2a7665ded270b8ba7d6b29191e8592630c19b97
    • MD5 SHA1 SHA512
    Score
    10/10
    remcosrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks