Overview

overview

10

Static

static

10

2124-3-0x0...ry.exe

windows7-x64

2124-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2124-3-0x0000000000400000-0x0000000000926000-memory.dmp

  • Size

    5.1MB

  • Sample

    231213-nzm5bscbej

  • MD5

    1edba0c7e63f35db4d4a51317cf557ce

  • SHA1

    f89906968c7d1a1af2e74db46c582e5ce245ccff

  • SHA256

    cce23e4b508e1dc4cb50930dc879e1e4cb9ae4679bea9b9000527c5f9d1907a6

  • SHA512

    fa226ae5fe583b5d741b10f986c91b82a631411741fbb6911446448e6231890bbc089312f03497ab99f8ee476e7642fc259c37a644af89c9da005e361d721560

  • SSDEEP

    12288:cX7tPMK8ctGe4Dzl4h2QnuYs/ZsQcvrX:2X8ctGeQQnujZ4

Score
10/10
remcosdecember

Malware Config

Extracted

Family

remcos

Botnet

december

C2

91.92.243.110:3734

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-QGHS48

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      2124-3-0x0000000000400000-0x0000000000926000-memory.dmp

    • Size

      5.1MB

    • MD5

      1edba0c7e63f35db4d4a51317cf557ce

    • SHA1

      f89906968c7d1a1af2e74db46c582e5ce245ccff

    • SHA256

      cce23e4b508e1dc4cb50930dc879e1e4cb9ae4679bea9b9000527c5f9d1907a6

    • SHA512

      fa226ae5fe583b5d741b10f986c91b82a631411741fbb6911446448e6231890bbc089312f03497ab99f8ee476e7642fc259c37a644af89c9da005e361d721560

    • SSDEEP

      12288:cX7tPMK8ctGe4Dzl4h2QnuYs/ZsQcvrX:2X8ctGeQQnujZ4

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks