General

  • Target

    56045d92e95bcd761cbed948b24e0c7b.bin

  • Size

    263KB

  • Sample

    230607-ccc53agd77

  • MD5

    07dda2639ae9876148a1d574de721c8c

  • SHA1

    5cf7663a00e781d1d8877cc66947085887db6114

  • SHA256

    3c0aaffe2ab61aaa449a20fa9946d1ba52efa57a28817cfd803892e2135b2a98

  • SHA512

    abeea781dae4b204f3dff55f744f4629932cf18d0d213227a813f9bfe00507fc7789f1f1d5cf6a2f789f6bcd6b911dc4a97266a3481c9161d15122e3ddae9ea4

  • SSDEEP

    6144:oj9dhTrOMCRdQaHe12j27+C+2PqHgQ0gQEWe:oj9/T1Ed9HVj27+78qH30gQEF

Score
10/10

Malware Config

Extracted

Family

remcos

Botnet

DON DINERO

C2

moneymaker.dynuddns.net:5050

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-MR2RPQ

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845.exe

    • Size

      479KB

    • MD5

      56045d92e95bcd761cbed948b24e0c7b

    • SHA1

      a58fb81ea1490829f20cd383769f103fd96248bf

    • SHA256

      242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845

    • SHA512

      2b0943bb4517855bca44dc3e59d5c5e7e97394bc660ff85a857a98f7e1a54e7ca30a4e89d5e7195a92b7451964b8670067dc328217feb11f9edf8391f051c597

    • SSDEEP

      6144:k1EwL0xQk9VdeLuVnQs8QLgt8cBvnkCX/3Rde+A+DdsAOZZiXXPcNt2OhX:k1EZT90uNQzYgScBvnn/XpTs/ZiFOhX

    Score
    1/10

MITRE ATT&CK Matrix

Tasks