Overview

overview

10

Static

static

10

4612-140-0...ry.exe

windows7-x64

4612-140-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4612-140-0x0000000000400000-0x000000000047F000-memory.dmp

  • Size

    508KB

  • Sample

    220916-mlsxzsfea5

  • MD5

    b06d8f8c04884a2b3a1534c570a62730

  • SHA1

    0dcdb7a0c7156b0bffeb50a1605fdf98aab33c91

  • SHA256

    c7180b37568331263650e86934f7393fb9ace86b846c35cbd722e01b0fbc30d2

  • SHA512

    52aa7183cd814ac58a7914b6f9b1d4d38c59502a0bdfb785c7104529aa19847bdc5124975bb949553c637984587eaf44d871a84cac5d4e68a3d6cfb2bfe98c48

  • SSDEEP

    12288:Ymnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSln9:IiLJbpI7I2WhQqZ7l9

Score
10/10
remcosip-remcos

Malware Config

Extracted

Family

remcos

Botnet

IP-REMCOS

C2

91.192.100.12:2404

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-JS00ZN

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    Remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      4612-140-0x0000000000400000-0x000000000047F000-memory.dmp

    • Size

      508KB

    • MD5

      b06d8f8c04884a2b3a1534c570a62730

    • SHA1

      0dcdb7a0c7156b0bffeb50a1605fdf98aab33c91

    • SHA256

      c7180b37568331263650e86934f7393fb9ace86b846c35cbd722e01b0fbc30d2

    • SHA512

      52aa7183cd814ac58a7914b6f9b1d4d38c59502a0bdfb785c7104529aa19847bdc5124975bb949553c637984587eaf44d871a84cac5d4e68a3d6cfb2bfe98c48

    • SSDEEP

      12288:Ymnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSln9:IiLJbpI7I2WhQqZ7l9

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks