Overview

overview

10

Static

static

10

1784-74-0x...ry.exe

windows7-x64

1784-74-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1784-74-0x0000000000400000-0x000000000047F000-memory.dmp

  • Size

    508KB

  • Sample

    220920-jfml8scce2

  • MD5

    a2ca7df125179e80406b40fb58fe07a2

  • SHA1

    9655e1ca868d27972f55783a90c339e8dd1c2d30

  • SHA256

    a8f11151f74473a8bcb77acfa8d488c1db3ad58a869f2c8b04260040d0cb57e4

  • SHA512

    2c7d1d7317170a8c90bd6df2cdde5c809d83a354e2763d2f14d9e8902dbf945606f1e221f3986a6b579063d48a20bd8d00132be4b79e045deb16690b1b278209

  • SSDEEP

    6144:uAg4RVDZlHx5k7iLZnaSguI2IiRL/SISjw8nHWh1R2K3g9ZsAOZZQmXxlcK:umnk7iLJbpIpiRL6I2WhSKQ9ZsfZQS

Score
10/10
remcosstarmoneynew

Malware Config

Extracted

Family

remcos

Botnet

StarMoneyNew

C2

185.252.178.35:41900

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-6RGOTF

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    Remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      1784-74-0x0000000000400000-0x000000000047F000-memory.dmp

    • Size

      508KB

    • MD5

      a2ca7df125179e80406b40fb58fe07a2

    • SHA1

      9655e1ca868d27972f55783a90c339e8dd1c2d30

    • SHA256

      a8f11151f74473a8bcb77acfa8d488c1db3ad58a869f2c8b04260040d0cb57e4

    • SHA512

      2c7d1d7317170a8c90bd6df2cdde5c809d83a354e2763d2f14d9e8902dbf945606f1e221f3986a6b579063d48a20bd8d00132be4b79e045deb16690b1b278209

    • SSDEEP

      6144:uAg4RVDZlHx5k7iLZnaSguI2IiRL/SISjw8nHWh1R2K3g9ZsAOZZQmXxlcK:umnk7iLJbpIpiRL6I2WhSKQ9ZsfZQS

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks