Overview

overview

10

Static

static

10

2540-15-0x...ry.exe

windows7-x64

2540-15-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2540-15-0x0000000072CE0000-0x0000000073D42000-memory.dmp

  • Size

    16.4MB

  • Sample

    231012-sw5mesgf3x

  • MD5

    0e1f7875f6445ab37a08fc9f75277e75

  • SHA1

    f80f14b6a0f21c614c0b9808c26f142ee52e2ff1

  • SHA256

    16ff4fd638a92bf2f5f5c491c5056e4138a1c156044cf7a4d92ec722d27a3884

  • SHA512

    f6a7683b8e327bcfa4ce83278da22e0fe0238028173b420f80ac9dc58eecab4cdfbc6bacb31616704fe8717e31484a0251f1c33ba64f3618594a5decb1638ffa

  • SSDEEP

    6144:C7Onzw7Skoj6R0jyDY/paHm/owZQyiBwdBR9xvNB8Ny6xLsAOZZS4XqcHt7ov:CSn6Skofjy0hWmgwZQyHB/ALs/ZSA8v

Score
10/10
remcoscrypted

Malware Config

Extracted

Family

remcos

Botnet

Crypted

C2

5.78.40.210:2404

5.78.40.210:2405
Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    true

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    sierts.dat

  • keylog_flag

    false

  • keylog_path

    %AppData%

  • mouse_option

    false

  • mutex

    iesitust-QX9335

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      2540-15-0x0000000072CE0000-0x0000000073D42000-memory.dmp

    • Size

      16.4MB

    • MD5

      0e1f7875f6445ab37a08fc9f75277e75

    • SHA1

      f80f14b6a0f21c614c0b9808c26f142ee52e2ff1

    • SHA256

      16ff4fd638a92bf2f5f5c491c5056e4138a1c156044cf7a4d92ec722d27a3884

    • SHA512

      f6a7683b8e327bcfa4ce83278da22e0fe0238028173b420f80ac9dc58eecab4cdfbc6bacb31616704fe8717e31484a0251f1c33ba64f3618594a5decb1638ffa

    • SSDEEP

      6144:C7Onzw7Skoj6R0jyDY/paHm/owZQyiBwdBR9xvNB8Ny6xLsAOZZS4XqcHt7ov:CSn6Skofjy0hWmgwZQyHB/ALs/ZSA8v

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks