Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c751eef24ba7492781e43c5034f1175ec098ebc72602e68822fd4c09cac0b9bb

  • Size

    469KB

  • MD5

    6679fc3ab44e5e9ff3abe5445d3fc09d

  • SHA1

    d436d44c5a23a2450cf37012f16e0833d94be256

  • SHA256

    c751eef24ba7492781e43c5034f1175ec098ebc72602e68822fd4c09cac0b9bb

  • SHA512

    1a8cac461c1a90f3f5fec2f8bc0cf8e3d88684ce335ab4a2c79532425ffe09a7a1fdbee54dacdfb632c6dccb17d86babbea4a6fd0522c706397f83c9b6aa3fc8

  • SSDEEP

    12288:Wmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSUn9:uiLJbpI7I2WhQqZ7U9

Score
10/10
win 4remcos

Malware Config

Extracted

Family

remcos

Botnet

win 4

C2

51.210.137.26:2404

51.210.137.26:5656
Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    win4

  • mouse_option

    false

  • mutex

    win4-RNHRJV

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    Remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Signatures

Files

  • c751eef24ba7492781e43c5034f1175ec098ebc72602e68822fd4c09cac0b9bb
    .exe windows x86

    5d354883fe6f15fcf48045037a99fb7a


    Headers

    Imports

    Sections