Overview

overview

10

Static

static

10

GitCoin-dA...er.exe

windows7_x64

10

GitCoin-dA...er.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GitCoin-dApp-2.1.2-installer.exe

  • Size

    118.6MB

  • Sample

    220204-me3tlshbc9

  • MD5

    53700031ae88e5c268791f39d4cda497

  • SHA1

    4a43ebfc2c9aa93e977010779923bbcac160c38a

  • SHA256

    f3be2e863702dbf427638492c35ac59f43f05bc451d667ba88798de67227ea79

  • SHA512

    1356548c3fc862894f1e30997910f8f44e2928a38fa132749e2ce9a9ea95126557798304fb6833d603962979405f21f8a8225b2bb0d42a594ae5e1722a47f5ea

Score
10/10
babadedaremcoscrypterloaderrat

Malware Config

Targets

    • Target

      GitCoin-dApp-2.1.2-installer.exe

    • Size

      118.6MB

    • MD5

      53700031ae88e5c268791f39d4cda497

    • SHA1

      4a43ebfc2c9aa93e977010779923bbcac160c38a

    • SHA256

      f3be2e863702dbf427638492c35ac59f43f05bc451d667ba88798de67227ea79

    • SHA512

      1356548c3fc862894f1e30997910f8f44e2928a38fa132749e2ce9a9ea95126557798304fb6833d603962979405f21f8a8225b2bb0d42a594ae5e1722a47f5ea

    Score
    10/10
    babadedaremcoscrypterloaderrat

    • Babadeda

      Babadeda is a crypter delivered as a legitimate installer and used to drop other malware families.

      loadercrypterbabadeda

    • Babadeda Crypter

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks