remcos | 06a2a3286b0fe016d48634d2b01bb27217249a1ffd92a46e60c174e8cc9f5a99 | Triage

Analysis

max time kernel
162s
max time network
159s
platform
windows10_x64
resource
win10-en-20211208
submitted
29-01-2022 18:51

Sharing

Report Analysis Logs

General

Target

06a2a3286b0fe016d48634d2b01bb27217249a1ffd92a46e60c174e8cc9f5a99.exe
Size

463KB
MD5

58f452ecde75e0eed7dceea9bce4b244
SHA1

c0aa35f3619c163a28ed0d0cfb0695518b7f4e74
SHA256

06a2a3286b0fe016d48634d2b01bb27217249a1ffd92a46e60c174e8cc9f5a99
SHA512

85ee6f69120bcf804b63b22e1468da17104e1927859ca30daa72fbc1a15c9238b57c7738f007a99737b727ad62d28801c83e4845d84ee9b3f45371e234c33f4e

Score

10^/10

remcos rat

Malware Config

Signatures

Remcos
Remcos is a closed-source remote control and surveillance software.
rat remcos
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

06a2a3286b0fe016d48634d2b01bb27217249a1ffd92a46e60c174e8cc9f5a99.exe

pid process

2504 06a2a3286b0fe016d48634d2b01bb27217249a1ffd92a46e60c174e8cc9f5a99.exe

C:\Users\Admin\AppData\Local\Temp\06a2a3286b0fe016d48634d2b01bb27217249a1ffd92a46e60c174e8cc9f5a99.exe
"C:\Users\Admin\AppData\Local\Temp\06a2a3286b0fe016d48634d2b01bb27217249a1ffd92a46e60c174e8cc9f5a99.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...