General

  • Target

    AKBANK 002'den oluşturulan fatura ödemesiMerkantiliserendes.exe

  • Size

    894KB

  • Sample

    240215-hnmfrsbh34

  • MD5

    10d0b99ee5922390bd2bbe07e71a0a75

  • SHA1

    a6e89c9d5007811038fc2d3fd05ed6b01e7fd93a

  • SHA256

    05e0f79a1c435ee4d5f914b576b8d9c4a766895aad1da9186ac5a49cc98b3657

  • SHA512

    d97f9dfe0ec1c9803fb4f9e74e1ff0892b1068961cf7cd0d8fb1ac3d2b19b3c7d0852a4399b22259518c72b72b8d5d43434b510e904d27ddb9fd38652472828b

  • SSDEEP

    24576:GbgG0BHv4m+8zFkv0DLfyfPRBad/XpD7Ao+v:8gL+QFQ6Lf0A17Gv

Score
10/10

Malware Config

Targets

    • Target

      AKBANK 002'den oluşturulan fatura ödemesiMerkantiliserendes.exe

    • Size

      894KB

    • MD5

      10d0b99ee5922390bd2bbe07e71a0a75

    • SHA1

      a6e89c9d5007811038fc2d3fd05ed6b01e7fd93a

    • SHA256

      05e0f79a1c435ee4d5f914b576b8d9c4a766895aad1da9186ac5a49cc98b3657

    • SHA512

      d97f9dfe0ec1c9803fb4f9e74e1ff0892b1068961cf7cd0d8fb1ac3d2b19b3c7d0852a4399b22259518c72b72b8d5d43434b510e904d27ddb9fd38652472828b

    • SSDEEP

      24576:GbgG0BHv4m+8zFkv0DLfyfPRBad/XpD7Ao+v:8gL+QFQ6Lf0A17Gv

    Score
    10/10
    • Remcos

      Remcos is a closed-source remote control and surveillance software.

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks