Overview

overview

10

Static

static

10

1752-323-0...ry.exe

windows7-x64

10

1752-323-0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    43s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    15-09-2022 13:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1752-323-0x0000000050590000-0x0000000050613000-memory.exe

  • Size

    524KB

  • MD5

    c92896e15ef0305b91dd928d06e19a94

  • SHA1

    2553c2d1f6acc793f243d4816d952948887ff36e

  • SHA256

    52e1b2316a3dd45ef4ebb6fc0288c53495ad7570cb97071561f09fb05cf13ffc

  • SHA512

    52a318c8bc87dabfc01292cc54d0cec1a4e0150a856ec4c1ecac4deb509f689a2b4f628618aa8b2025581d3bce51140bb3292e678d4c303b00f3ee698f541850

  • SSDEEP

    12288:Smnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSFn9:CiLJbpI7I2WhQqZ7F9

Score
10/10
remcosrat

Malware Config

Signatures

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

Processes

  • C:\Users\Admin\AppData\Local\Temp\1752-323-0x0000000050590000-0x0000000050613000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1752-323-0x0000000050590000-0x0000000050613000-memory.exe"
    1⤵
      PID:1756

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1756-54-0x0000000000580000-0x0000000000603000-memory.dmp

      Filesize

      524KB

      Download