Overview

overview

10

Static

static

f966a54db5...db.exe

windows7_x64

1

f966a54db5...db.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f966a54db5fbb3b0b0344c2de54ce6c8a173bcc65d77270b84a33e4966f8c8db

  • Size

    6.2MB

  • Sample

    220524-rjls4shdhq

  • MD5

    73656236428e67e2c6cbe653eb8a3f11

  • SHA1

    48013689bfc313852dfd5638d8573d38ac9435f7

  • SHA256

    f966a54db5fbb3b0b0344c2de54ce6c8a173bcc65d77270b84a33e4966f8c8db

  • SHA512

    ac317bd873aeca48a86ef4290c5c164d2cc9f6672423c6d0a49ee2743a2714800affb7ba96483350b631818f598125f782fd04162d0336e331788c4897278a29

Score
10/10
rmsrattrojan

Malware Config

Targets

    • Target

      f966a54db5fbb3b0b0344c2de54ce6c8a173bcc65d77270b84a33e4966f8c8db

    • Size

      6.2MB

    • MD5

      73656236428e67e2c6cbe653eb8a3f11

    • SHA1

      48013689bfc313852dfd5638d8573d38ac9435f7

    • SHA256

      f966a54db5fbb3b0b0344c2de54ce6c8a173bcc65d77270b84a33e4966f8c8db

    • SHA512

      ac317bd873aeca48a86ef4290c5c164d2cc9f6672423c6d0a49ee2743a2714800affb7ba96483350b631818f598125f782fd04162d0336e331788c4897278a29

    Score
    10/10
    rmsrattrojan

    • RMS

      Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.

      trojanratrms
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks