General

  • Target

    SexOnTheBeach.bin

  • Size

    1.2MB

  • Sample

    210217-dvpresj7kj

  • MD5

    3d0807aa99589883f5dc7cb8fb6490d5

  • SHA1

    40e1d6397069aa7a02d04878df48a75ae0031c1f

  • SHA256

    cda3c2f396a4e635e9b1021a9bce498172e893e38af0de9790b682d0ca925f63

  • SHA512

    fb332eb89421a6925b04565bf22919b0fe73549314dc9855b4119bcf22d594bdd4e4918f4aebdf252c89fb48c3a5e6678d59852b49d3904af67d8557dc01440c

Score
10/10

Malware Config

Extracted

Family

remcos

C2

37.252.11.23:7878

Targets

    • Target

      SexOnTheBeach.bin

    • Size

      1.2MB

    • MD5

      3d0807aa99589883f5dc7cb8fb6490d5

    • SHA1

      40e1d6397069aa7a02d04878df48a75ae0031c1f

    • SHA256

      cda3c2f396a4e635e9b1021a9bce498172e893e38af0de9790b682d0ca925f63

    • SHA512

      fb332eb89421a6925b04565bf22919b0fe73549314dc9855b4119bcf22d594bdd4e4918f4aebdf252c89fb48c3a5e6678d59852b49d3904af67d8557dc01440c

    Score
    10/10
    • Remcos

      Remcos is a closed-source remote control and surveillance software.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks