Overview

overview

10

Static

static

10

3944-185-0...ry.exe

windows7-x64

1

3944-185-0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3944-185-0x0000000000400000-0x0000000000480000-memory.dmp

  • Size

    512KB

  • Sample

    230607-r88zyabh45

  • MD5

    c8fd9082cff159d22c6d421100e42356

  • SHA1

    e6174725b54c568126754096f2152b27d9b62e26

  • SHA256

    46750c7e8a9474e3b6369054b6938a892dd73b5a3b2acc7171ae93293d515e44

  • SHA512

    5d0cc5a72b768849eaac6d8265152b6abccbe0a40fb9bc910ba9aaa26a669a6b1ad671c190196ec48560255c04c098a2245c07c9b1cce6661e38eafd3c8053a1

  • SSDEEP

    12288:IX8/Vx65HCnDAByqulR1fZJQus/Z8qRq:P/Vc5HCnDABMfZJQ1Z9

Score
10/10
remcosrecovery

Malware Config

Extracted

Family

remcos

Botnet

RECOVERY

C2

www.nwconstructions.us:28364

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    125484

  • mouse_option

    false

  • mutex

    wsdeeqd-JHHA9X

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    Remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      3944-185-0x0000000000400000-0x0000000000480000-memory.dmp

    • Size

      512KB

    • MD5

      c8fd9082cff159d22c6d421100e42356

    • SHA1

      e6174725b54c568126754096f2152b27d9b62e26

    • SHA256

      46750c7e8a9474e3b6369054b6938a892dd73b5a3b2acc7171ae93293d515e44

    • SHA512

      5d0cc5a72b768849eaac6d8265152b6abccbe0a40fb9bc910ba9aaa26a669a6b1ad671c190196ec48560255c04c098a2245c07c9b1cce6661e38eafd3c8053a1

    • SSDEEP

      12288:IX8/Vx65HCnDAByqulR1fZJQus/Z8qRq:P/Vc5HCnDABMfZJQ1Z9

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks