Overview

overview

10

Static

static

10

400000.exe

windows7_x64

10

400000.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    400000.exe

  • Size

    128KB

  • Sample

    210125-1zw45zv9ya

  • MD5

    0087f55681d91202ee23a59100cfec61

  • SHA1

    02f422f674a53b3f92ca5687d8e46494dff27dcc

  • SHA256

    35ff8376eb55784d440648eddfcee55719b4211681e0e1df54cf8756869ce1e0

  • SHA512

    eb94dc203583b6e44dbf55fe8e7a438f87a81ea64e490107246a81c6a843ba22cfdf9141460ed48c42196c1befe2fc5485ee888bb3245c3a8c00a715d26580b9

Score
10/10
remcosrat

Malware Config

Extracted

Family

remcos

C2

whatgodcannotdodoestnotexist.duckdns.org:2559

Targets

    • Target

      400000.exe

    • Size

      128KB

    • MD5

      0087f55681d91202ee23a59100cfec61

    • SHA1

      02f422f674a53b3f92ca5687d8e46494dff27dcc

    • SHA256

      35ff8376eb55784d440648eddfcee55719b4211681e0e1df54cf8756869ce1e0

    • SHA512

      eb94dc203583b6e44dbf55fe8e7a438f87a81ea64e490107246a81c6a843ba22cfdf9141460ed48c42196c1befe2fc5485ee888bb3245c3a8c00a715d26580b9

    Score
    10/10
    remcosrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks