Overview

overview

10

Static

static

55cea01be9...22.exe

windows7_x64

10

55cea01be9...22.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55cea01be9db31d461bd2af148b97b60fda984fce92d0b5580eb0a8400eeda22

  • Size

    9.0MB

  • Sample

    220128-zp8ttsdfh7

  • MD5

    1ce3964e4e9cc18639ad2273d54f012a

  • SHA1

    9263790c2cae061094208e7bb8916ff1db22a5df

  • SHA256

    55cea01be9db31d461bd2af148b97b60fda984fce92d0b5580eb0a8400eeda22

  • SHA512

    71cc1fe6c920aa5ceb47aadc7affc6faf4e358634bc7c2abbf3713fa5bb41c4cf5583e22e9ac44a6d33a5227803c9d243cec0f58f13412fc4177de86b3093835

Score
10/10
rmsrattrojan

Malware Config

Targets

    • Target

      55cea01be9db31d461bd2af148b97b60fda984fce92d0b5580eb0a8400eeda22

    • Size

      9.0MB

    • MD5

      1ce3964e4e9cc18639ad2273d54f012a

    • SHA1

      9263790c2cae061094208e7bb8916ff1db22a5df

    • SHA256

      55cea01be9db31d461bd2af148b97b60fda984fce92d0b5580eb0a8400eeda22

    • SHA512

      71cc1fe6c920aa5ceb47aadc7affc6faf4e358634bc7c2abbf3713fa5bb41c4cf5583e22e9ac44a6d33a5227803c9d243cec0f58f13412fc4177de86b3093835

    Score
    10/10
    rmsrattrojan

    • RMS

      Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.

      trojanratrms

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks