General

  • Target

    Alıntı.exe

  • Size

    830KB

  • Sample

    210125-skkmq8fm8x

  • MD5

    cb6f7aa8475416055d6a363c4c0617dd

  • SHA1

    ceb31f102bd5d5bf63da93db0c44936b411de2e0

  • SHA256

    2b1530546744e05fc3e002b3db398e90449e6eab2aa259a691f5fb5d7bf49664

  • SHA512

    eb525403949ad3715c20183a4f5140f21a63b88895bc6ed9333f7684f43f409e6c14e956a6256df35526fa885a1a2ba719d2a006475e281d1f1c75a2c9727af1

Score
10/10

Malware Config

Extracted

Family

remcos

C2

whatgodcannotdodoestnotexist.duckdns.org:2559

Targets

    • Target

      Alıntı.exe

    • Size

      830KB

    • MD5

      cb6f7aa8475416055d6a363c4c0617dd

    • SHA1

      ceb31f102bd5d5bf63da93db0c44936b411de2e0

    • SHA256

      2b1530546744e05fc3e002b3db398e90449e6eab2aa259a691f5fb5d7bf49664

    • SHA512

      eb525403949ad3715c20183a4f5140f21a63b88895bc6ed9333f7684f43f409e6c14e956a6256df35526fa885a1a2ba719d2a006475e281d1f1c75a2c9727af1

    Score
    10/10
    • Remcos

      Remcos is a closed-source remote control and surveillance software.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks