Overview

overview

10

Static

static

10

1540-33-0x...ry.exe

windows7-x64

1540-33-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1540-33-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • Sample

    231204-b3w57agd91

  • MD5

    e9629191d81db063834fd901410747c7

  • SHA1

    bcab3e13d65757879e4800f5e3c932e03a4bf412

  • SHA256

    011bab18aaa17919acbf7683f05acb688246b7c9f3a09e8079740666a1a0bf3d

  • SHA512

    2ed6b57d55a5272070dd48fc09e6f2040fb5b73b732b8ad844c3b29e6f3fa3320f6ec051855d82e34633c782f31a3b890b2c864deedbdcc2808cfb3700ea85f9

  • SSDEEP

    6144:gXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNo5Gv:gX7tPMK8ctGe4Dzl4h2QnuPs/ZsZcv

Score
10/10
remcosremotehost

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

C2

185.157.162.241:1303

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    true

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-NT0JNG

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      1540-33-0x0000000000400000-0x0000000000482000-memory.dmp

    • Size

      520KB

    • MD5

      e9629191d81db063834fd901410747c7

    • SHA1

      bcab3e13d65757879e4800f5e3c932e03a4bf412

    • SHA256

      011bab18aaa17919acbf7683f05acb688246b7c9f3a09e8079740666a1a0bf3d

    • SHA512

      2ed6b57d55a5272070dd48fc09e6f2040fb5b73b732b8ad844c3b29e6f3fa3320f6ec051855d82e34633c782f31a3b890b2c864deedbdcc2808cfb3700ea85f9

    • SSDEEP

      6144:gXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNo5Gv:gX7tPMK8ctGe4Dzl4h2QnuPs/ZsZcv

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks