General

  • Target

    Remcos_RAT_v3.8.0.rar

  • Size

    34.1MB

  • MD5

    77c24f0bd962158bd76ca278d727df16

  • SHA1

    d8eb56355cbc80ce57952f79083ddb4aeb564382

  • SHA256

    51c43add40ea51e15b7193630f0ade9104e0d17974b8a07eaa5e225c99444e4b

  • SHA512

    1850cf08eb03ad4278962ce51d41c5625de52d7decd98c97f83aaf6efea37ce957db86778ebddff8b9ab7aa82319b1858c5b769901a526c6627c24f6b8f75c18

  • SSDEEP

    786432:e/b/VwujIxuhTL7Ajzage1OffwsKThCjGpvjcJQ1jQ2xmaMQOCq:e/b/++Qk37Au1O3wFsCtYJQ1ZEa9OCq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Remcos_RAT_v3.8.0.rar
    .rar
  • Remcos_RAT_v3.8.0/remcos_RAT_v3.8.0_By WantHacks/Remcos v3.8.0 Pro.exe
    .exe windows:5 windows x86 arch:x86

    66d02481b572b9fc096045c59dd5f5f3


    Headers

    Imports

    Exports

    Sections

  • Remcos_RAT_v3.8.0/remcos_RAT_v3.8.0_By WantHacks/server/RemcosServer.exe
    .exe windows:6 windows x64 arch:x64

    d9d5175c5951b2f5e681f77634514a7c


    Headers

    Imports

    Sections

  • Remcos_RAT_v3.8.0/remcos_RAT_v3.8.0_By WantHacks/server/libcrypto-3-x64.dll
    .dll windows:5 windows x64 arch:x64

    afa8a10163b2aa7831ee0e91bbe7d929


    Headers

    Imports

    Exports

    Sections

  • Remcos_RAT_v3.8.0/remcos_RAT_v3.8.0_By WantHacks/server/libssl-3-x64.dll
    .dll windows:5 windows x64 arch:x64

    a5db4944ca4c6446f5fbd8bbdc2b1577


    Headers

    Imports

    Exports

    Sections

  • Remcos_RAT_v3.8.0/remcos_RAT_v3.8.0_By WantHacks/server/server.crt
  • Remcos_RAT_v3.8.0/remcos_RAT_v3.8.0_By WantHacks/server/server.key
  • Remcos_RAT_v3.8.0/remcos_RAT_v3.8.0_By WantHacks/version.dll
    .dll windows:6 windows x86 arch:x86

    c24637d831a2119fdb5a229aaecbf747


    Headers

    Imports

    Exports

    Sections

  • gotovie_nastroiki.xml
    .xml