rms | 7fe0d96783f4abc9a0204a9ce7e80e989b0a33678e1370e741d3ec6617fa1408 | Triage

Sharing

General

Target

7fe0d96783f4abc9a0204a9ce7e80e989b0a33678e1370e741d3ec6617fa1408
Size

9.0MB
Sample

220128-yqr22acbgj
MD5

ff8470db2ed2f3804d46623e7167e9af
SHA1

44950816f281a32b13e271623de53c9e681b35a1
SHA256

7fe0d96783f4abc9a0204a9ce7e80e989b0a33678e1370e741d3ec6617fa1408
SHA512

2e52d11d23db8ea21f4715dc42d608d5a8a98d8a32375c89198292c207288f99a33fa1c805a6035d92cfc3ce2375c4c55c39df5dc3bd0848032f46525871af5f

Score

10^/10

rms rat trojan

Malware Config

Targets

- Target
  
  7fe0d96783f4abc9a0204a9ce7e80e989b0a33678e1370e741d3ec6617fa1408
- Size
  
  9.0MB
- MD5
  
  ff8470db2ed2f3804d46623e7167e9af
- SHA1
  
  44950816f281a32b13e271623de53c9e681b35a1
- SHA256
  
  7fe0d96783f4abc9a0204a9ce7e80e989b0a33678e1370e741d3ec6617fa1408
- SHA512
  
  2e52d11d23db8ea21f4715dc42d608d5a8a98d8a32375c89198292c207288f99a33fa1c805a6035d92cfc3ce2375c4c55c39df5dc3bd0848032f46525871af5f
Score

10^/10

rms rat trojan
- RMS
  Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.
  trojan rat rms
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2