General

  • Target

    1772-31-0x0000000073110000-0x0000000074364000-memory.dmp

  • Size

    15.3MB

  • Sample

    231024-k7ma8abh7y

  • MD5

    41a995f953fffb0b65897e05370dac30

  • SHA1

    f23e05c0b96b3b6def94e1ede3f123e08f64f6a6

  • SHA256

    0f160d15c4eccc7627a16b679c1efdc061440ac70fc1a126f82ed8569ea447a1

  • SHA512

    50c8971b4d45baf0940b1ccf51b47b9bc51acaa5be6e228e982abcbe0634563aa3298edcffcff89fa30ff6e7145a5d2cde5a09bb8f730d20ea92bd91bf2de7a3

  • SSDEEP

    6144:+QHiPrjB5ikgxx+bdPoWYnRmCgEVAWK9goN1dFv/xpM9usAOZZpAXNc7Gbv:+QinB5iedQ1RmPEVAWONjpBs/ZpSbv

Score
10/10

Malware Config

Extracted

Family

remcos

Botnet

Crypted

C2

95.214.24.210:2404

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    true

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    ourytgbh.dat

  • keylog_flag

    false

  • keylog_path

    %AppData%

  • mouse_option

    false

  • mutex

    puestodg-TE5TIH

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      1772-31-0x0000000073110000-0x0000000074364000-memory.dmp

    • Size

      15.3MB

    • MD5

      41a995f953fffb0b65897e05370dac30

    • SHA1

      f23e05c0b96b3b6def94e1ede3f123e08f64f6a6

    • SHA256

      0f160d15c4eccc7627a16b679c1efdc061440ac70fc1a126f82ed8569ea447a1

    • SHA512

      50c8971b4d45baf0940b1ccf51b47b9bc51acaa5be6e228e982abcbe0634563aa3298edcffcff89fa30ff6e7145a5d2cde5a09bb8f730d20ea92bd91bf2de7a3

    • SSDEEP

      6144:+QHiPrjB5ikgxx+bdPoWYnRmCgEVAWK9goN1dFv/xpM9usAOZZpAXNc7Gbv:+QinB5iedQ1RmPEVAWONjpBs/ZpSbv

    Score
    1/10

MITRE ATT&CK Matrix

Tasks