Overview

overview

10

Static

static

1

FA0900009000.exe

windows7_x64

10

FA0900009000.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FA0900009000.exe

  • Size

    415KB

  • Sample

    210422-hlz4vxr76j

  • MD5

    f5bbc275c2fe8892a7173cec02b48344

  • SHA1

    fb2bb2d7b845e442418f451dca20a1ca4fc45c5b

  • SHA256

    3bc2abc2f4f8e56df7dcc64602b053f62ade2953d76b6020a21c252cc86a41db

  • SHA512

    ce518ef7add1718ee63d0b7229f9a34a40a8060a21800de5191e5a0ecbbb1b88e6c35fcd795f42c54f9467b546873301470060c5a117bff10dd8fff7e664ff87

Score
10/10
remcosrat

Malware Config

Targets

    • Target

      FA0900009000.exe

    • Size

      415KB

    • MD5

      f5bbc275c2fe8892a7173cec02b48344

    • SHA1

      fb2bb2d7b845e442418f451dca20a1ca4fc45c5b

    • SHA256

      3bc2abc2f4f8e56df7dcc64602b053f62ade2953d76b6020a21c252cc86a41db

    • SHA512

      ce518ef7add1718ee63d0b7229f9a34a40a8060a21800de5191e5a0ecbbb1b88e6c35fcd795f42c54f9467b546873301470060c5a117bff10dd8fff7e664ff87

    Score
    10/10
    remcosrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks