Overview

overview

10

Static

static

000000000090009.exe

windows7_x64

10

000000000090009.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    000000000090009.exe

  • Size

    171KB

  • Sample

    210120-ftjc3l1ewx

  • MD5

    af441b85566a48db44b5c4a9f945b26f

  • SHA1

    366e2753ba8f9a6092f17fa0e5c087f42ff93033

  • SHA256

    19c85373616be5338b379799fa36c19e4ff5d5e7f67fa820ea9040ab5427d516

  • SHA512

    1196080e8c93f313bc25d226a060938dd956b81ffe073926b2e3a800b1c4cf0c708f88959041771c63db742cfe70d825f2ed1fb65dde7cdd3e81c525eb77b1e5

Score
10/10
remcosrat

Malware Config

Targets

    • Target

      000000000090009.exe

    • Size

      171KB

    • MD5

      af441b85566a48db44b5c4a9f945b26f

    • SHA1

      366e2753ba8f9a6092f17fa0e5c087f42ff93033

    • SHA256

      19c85373616be5338b379799fa36c19e4ff5d5e7f67fa820ea9040ab5427d516

    • SHA512

      1196080e8c93f313bc25d226a060938dd956b81ffe073926b2e3a800b1c4cf0c708f88959041771c63db742cfe70d825f2ed1fb65dde7cdd3e81c525eb77b1e5

    Score
    10/10
    remcosrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks