rms | 96665b5c55da7633dc0e67240dfbaac0c872fc74f55954d766cee3a1c8682f92 | Triage

Submit
Reports

Overview

overview

Static

static

96665b5c55...92.exe

windows7_x64

96665b5c55...92.exe

windows10_x64

Sharing

General

Target

96665b5c55da7633dc0e67240dfbaac0c872fc74f55954d766cee3a1c8682f92
Size

5.1MB
Sample

220129-e9h4padaek
MD5

ab6a5328c37edd22de33ece56dc8f043
SHA1

e2b28629299d824ae085eb1476f46f92cf364c0a
SHA256

96665b5c55da7633dc0e67240dfbaac0c872fc74f55954d766cee3a1c8682f92
SHA512

42b8bdad1933408bb556731b6766f34d42aa8fd0df9e1d629a4136586e9ed1bb8d49da2958e7bd8a5179414fee2680c9b909c94ffac0b109cebc0008e67bf6f8

Score

10^/10

rms evasion rat trojan

Static task

static1

Behavioral task

behavioral1

Sample

96665b5c55da7633dc0e67240dfbaac0c872fc74f55954d766cee3a1c8682f92.exe

Resource

win7-en-20211208

rms evasion rat trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

96665b5c55da7633dc0e67240dfbaac0c872fc74f55954d766cee3a1c8682f92.exe

Resource

win10-en-20211208

rms evasion rat trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  96665b5c55da7633dc0e67240dfbaac0c872fc74f55954d766cee3a1c8682f92
- Size
  
  5.1MB
- MD5
  
  ab6a5328c37edd22de33ece56dc8f043
- SHA1
  
  e2b28629299d824ae085eb1476f46f92cf364c0a
- SHA256
  
  96665b5c55da7633dc0e67240dfbaac0c872fc74f55954d766cee3a1c8682f92
- SHA512
  
  42b8bdad1933408bb556731b6766f34d42aa8fd0df9e1d629a4136586e9ed1bb8d49da2958e7bd8a5179414fee2680c9b909c94ffac0b109cebc0008e67bf6f8
Score

10^/10

rms evasion rat trojan
- RMS
  Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.
  trojan rat rms
- Executes dropped EXE
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

rmsevasionrattrojan

behavioral2

rmsevasionrattrojan

© 2018-2025

Terms | Privacy