General

  • Target

    5b6eb9b35894b607f65989693625887e.bin

  • Size

    262KB

  • Sample

    230607-ccmdqsgd84

  • MD5

    eb6a9f94f59f7938452e25a9e61461f8

  • SHA1

    32c51f17ba54a70eabca874b9e2d9f4fc5d75af0

  • SHA256

    974a2e9c0b272ad9be10cc81f2189d83cfc39894945f50b25724337ca8d5c2fe

  • SHA512

    aa4bc24ca3ae9cde94111ac7870e1f6128fee24e1f798d5d28566204194bfdd1b3bb71e23941d4b1068ab97ca4c59d35a01c5264ca28d10762276f855222662c

  • SSDEEP

    6144:/65EZX/EJ/YRCQEg4SPM0l6csaSvX4UQr5GF1:/oEZXk/6/lkLQr561

Score
10/10

Malware Config

Extracted

Family

remcos

Botnet

RD ASEGU

C2

newsestrenos1.duckdns.org:2021

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-B0Z5XX

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      4424663695e9749f70cf73c587c910202344b18aa86144ca748aede28239a13f.exe

    • Size

      478KB

    • MD5

      5b6eb9b35894b607f65989693625887e

    • SHA1

      89a59cbe0e6c6f2e84d683467f6d445a51ecaca8

    • SHA256

      4424663695e9749f70cf73c587c910202344b18aa86144ca748aede28239a13f

    • SHA512

      a85c17cf00e3f16f02290916318c2ce488a0c9d6c6283c0981aad120e3f9fa84a6a70bed57b10de46477959fcbe7fba4a8fcd9c6b6fc8ecee033acf8ca7706da

    • SSDEEP

      6144:y1EwL0xQk9VdeLuVnQs8QLgt8cBvnkCX/3Rde+A+DdsAOZZiXXPcNs2OhX:y1EZT90uNQzYgScBvnn/XpTs/ZiEOhX

    Score
    1/10

MITRE ATT&CK Matrix

Tasks