Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c7ae8055bc1392f458f9e984c454ebc2_JC.bin

  • Size

    265KB

  • Sample

    230902-phl2dadb85

  • MD5

    09f7cf8a1ce569235359e229ffef025d

  • SHA1

    51a8b35caa2de1309975bdd7cc13e3598d1bf7e0

  • SHA256

    f73c3f0ee63334e3a1812334400a136a8842b45478de73f812b0544266ef76c5

  • SHA512

    116bc735b9cc1bc3739dc6ecb3b9e8cc0fe069162023ae7bde4ceaab4701bf4e324d1dc1156c25e0e877032f5cd09b0a8c579f5e1465859ed51870d0073d6817

  • SSDEEP

    6144:h++7XSPt6Axn41RSdWrrsUXyTbzp/io+hc7ukWM3eqEFTsQxbci:hrW0okTrsUXKzVio+yulM3eqcsMbci

Score
10/10

Malware Config

Extracted

Family

remcos

Botnet

Sep01

C2

xboxoner.duckdns.org:7171

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-42A9ST

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      6d69abf704c0ac0c71d7d35cc0eaa5b0ba230b7538ee159ad415b06798143c33.exe

    • Size

      483KB

    • MD5

      c7ae8055bc1392f458f9e984c454ebc2

    • SHA1

      01ccdc2d6180625e64d7bc923cd453750f077b81

    • SHA256

      6d69abf704c0ac0c71d7d35cc0eaa5b0ba230b7538ee159ad415b06798143c33

    • SHA512

      eea0042af947b33db3d10c554a6edb781b3f8adbc3b936e91ccac72a95d38c080b78e3a698c143ad0d44a59eab15187b305bb206db151903b8be28fda0413ff9

    • SSDEEP

      6144:ku/TwNrjB5ikgxx+bdPoWYnRmCgEVAWK9goN1dFv/xpM9rsAOZZpAXNc7obv:ku7wNB5iedQ1RmPEVAWONjpcs/ZpEbv

    Score
    1/10

MITRE ATT&CK Matrix

Tasks