Overview

overview

10

Static

static

scanned order 1.scr

windows7_x64

10

scanned order 1.scr

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ba45d8c9d5c2a00b6947a7ff864da585a24ac14424d8a05ede8e64683184183

  • Size

    325KB

  • Sample

    220521-n2vl7ahfcr

  • MD5

    1bd74fa19c87febe98087f47198561b2

  • SHA1

    0ea81cd72d8ed913c97080db6840d84453b2be60

  • SHA256

    5ba45d8c9d5c2a00b6947a7ff864da585a24ac14424d8a05ede8e64683184183

  • SHA512

    87a2323bb9ef6a084ffd901d83a976e9ecfb2b1484f68fe018a33723db78f5c63723f2b16428f6fde95af27a4af55b0f3feb6e55e21e7e74bd25a1c0612ca45f

Score
10/10
remcosrat

Malware Config

Targets

    • Target

      scanned order 1.scr

    • Size

      660KB

    • MD5

      6c4bb3b95606b439e5e2fb3414c63b70

    • SHA1

      8b4e9c604c5597c660133da71e23cc1cd81bbe44

    • SHA256

      738ea925d9f26dc03c18efd41de5e310285a36eef0147e7767a25dcf3fb1b24d

    • SHA512

      8b91dc4328c62d56cd2ad023c483733c5375c41fdd68512ae18372e5862e0f3bfa4772036c4ccf70cf04969101ecd51f0c8590ff5149d2146479b3e257a4afdd

    Score
    10/10
    remcosrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks