General

  • Size

    462KB

  • Sample

    220923-han3fahcgn

  • MD5

    8ed724021bb88fd77a372b5a99b0d0fa

  • SHA1

    5a4d36fb8fefc81b06b848e619a150f44337e651

  • SHA256

    5f22fce8c855d810422147bed37ed543c0b187652397e2854b7184fae0a5042f

  • SHA512

    b4353a82a00b55cf1bd972508c1ca62516fdff9df29e0c978cf2047f737166f3e2417b2c272b67c142f0bbae1919c4c9cf12a39b7df31524e22ac103d83bcf80

Score
10/10

Malware Config

Extracted

Family

remcos

Botnet

asd

C2

141.95.84.40:7171

Attributes
audio_folder
MicRecords
audio_path
%AppData%
audio_record_time
5
connect_delay
0
connect_interval
1
copy_file
remcos.exe
copy_folder
Remcos
delete_file
false
hide_file
false
hide_keylog_file
false
install_flag
false
install_path
%AppData%
keylog_crypt
false
keylog_file
logs.dat
keylog_flag
false
keylog_folder
remcos
keylog_path
%AppData%
mouse_option
false
mutex
sevsabbw-IH2O2T
screenshot_crypt
false
screenshot_flag
false
screenshot_folder
Screenshots
screenshot_path
%AppData%
screenshot_time
10
startup_value
Remcos
take_screenshot_option
false
take_screenshot_time
5
take_screenshot_title
notepad;solitaire;

Targets

    • Target

      tmp

    • Size

      462KB

    • MD5

      8ed724021bb88fd77a372b5a99b0d0fa

    • SHA1

      5a4d36fb8fefc81b06b848e619a150f44337e651

    • SHA256

      5f22fce8c855d810422147bed37ed543c0b187652397e2854b7184fae0a5042f

    • SHA512

      b4353a82a00b55cf1bd972508c1ca62516fdff9df29e0c978cf2047f737166f3e2417b2c272b67c142f0bbae1919c4c9cf12a39b7df31524e22ac103d83bcf80

    Score
    1/10

MITRE ATT&CK Matrix