Overview

overview

10

Static

static

10

e2b0c5d95f...2d.exe

windows7_x64

10

e2b0c5d95f...2d.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2b0c5d95f9948b45b28b909ec716fe8df305d2b63d6b8e433aee3279929b32d

  • Size

    365KB

  • Sample

    220524-17k16ahhc4

  • MD5

    def2219991114fbac93aca787579946c

  • SHA1

    e2c877782f16b786db3d569895a23fe9920e2ad4

  • SHA256

    e2b0c5d95f9948b45b28b909ec716fe8df305d2b63d6b8e433aee3279929b32d

  • SHA512

    1f5252c63ed6959b96fcc10863dee2f39ef949f2d18905f821fb429d5e471345b7564bd0bccdee22eeefdcced3a883bd0b5bc9e29bbabb2442a17ebdd4793109

Score
10/10
webmonitorsuricataupx

Malware Config

Extracted

Family

webmonitor

C2

realmc.wm01.to:443

Attributes
  • config_key

    oYcAbuzqIknRBd3Dgebv7Tz0Arka5kxb

  • private_key

    7aUhIuPTD

  • url_path

    /recv5.php

Targets

    • Target

      e2b0c5d95f9948b45b28b909ec716fe8df305d2b63d6b8e433aee3279929b32d

    • Size

      365KB

    • MD5

      def2219991114fbac93aca787579946c

    • SHA1

      e2c877782f16b786db3d569895a23fe9920e2ad4

    • SHA256

      e2b0c5d95f9948b45b28b909ec716fe8df305d2b63d6b8e433aee3279929b32d

    • SHA512

      1f5252c63ed6959b96fcc10863dee2f39ef949f2d18905f821fb429d5e471345b7564bd0bccdee22eeefdcced3a883bd0b5bc9e29bbabb2442a17ebdd4793109

    Score
    10/10
    suricata

    • suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

      suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

      suricata

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks