Overview

overview

10

Static

static

7

agent-7.1.7.0 (1).exe

windows10-2004-x64

10

out.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    agent-7.1.7.0 (1).exe

  • Size

    17.1MB

  • Sample

    231219-em2braeegr

  • MD5

    254e7d77f5a53bd4094885703d2cf85e

  • SHA1

    36dd3760caec9f0f3caee51709668e7f575c759e

  • SHA256

    9c1228a391859ca63161ace42cc9b9024df443529828a89311dc9b675e3a916e

  • SHA512

    4790d86f8d389bb578e8edc08bd5ee60d5dfd7c13fc1da96ae3c575ec1c536fc664edf2e5126777a95813723e0260c79691ca63911144322b1baf87e7c851541

  • SSDEEP

    393216:g4wcVTVM9WdAtO2X8T5M89qkfNRIjd6FsqN/OyBnuvH6p0:BwK9dAt58ThqppU/O2wH5

Score
10/10
rmsrattrojanupx

Malware Config

Targets

    • Target

      agent-7.1.7.0 (1).exe

    • Size

      17.1MB

    • MD5

      254e7d77f5a53bd4094885703d2cf85e

    • SHA1

      36dd3760caec9f0f3caee51709668e7f575c759e

    • SHA256

      9c1228a391859ca63161ace42cc9b9024df443529828a89311dc9b675e3a916e

    • SHA512

      4790d86f8d389bb578e8edc08bd5ee60d5dfd7c13fc1da96ae3c575ec1c536fc664edf2e5126777a95813723e0260c79691ca63911144322b1baf87e7c851541

    • SSDEEP

      393216:g4wcVTVM9WdAtO2X8T5M89qkfNRIjd6FsqN/OyBnuvH6p0:BwK9dAt58ThqppU/O2wH5

    Score
    10/10
    rmsrattrojanupx

    • RMS

      Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.

      trojanratrms

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

    • Target

      out.upx

    • Size

      21.1MB

    • MD5

      6cf6fa06c9634d1422e283e3fa2ca15e

    • SHA1

      177eb215c09c9e1d42901cb184489e772d7c4362

    • SHA256

      b9810e8f848e633421ace7cdbe74ff8e07e4aa9825f3b91c098e0d9204f11edc

    • SHA512

      f6a1089633c8d8013a5f4b427a0eb816adc9f8d1b5411f024d1c3eb6104e710143e86f51f720edc7f660d8bc60fe4b12518be794302471b5dc28965fc898c3f2

    • SSDEEP

      393216:5Rk54iRTVM9WdAtO2X8T5M89qkfNRIjd6FsqN/OyBnuvH6p:i9dAt58ThqppU/O2wH

    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks