Overview

overview

10

Static

static

10

2492-25-0x...ry.exe

windows7-x64

2492-25-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2492-25-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • Sample

    240402-v87zesgg85

  • MD5

    897d8c5b4817ec0516bba1315be41ed8

  • SHA1

    3a11f30dc630d62f30871d3f254da5872c876e30

  • SHA256

    4e171601f47c1995bdec0a12860164d1feccc42a3a75d9ee6a0adb13fba69ce9

  • SHA512

    8b7e40baf7ba0ae1279ee0e9fd86d5fe1dea75b09e03440d6efdc1b1ea979c9aff66bf0affa58e5f0633871f98d7e613a8ee5fe9f031aa33f13e1c6035b1486b

  • SSDEEP

    6144:0XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNF5Gv:0X7tPMK8ctGe4Dzl4h2QnuPs/ZDwcv

Score
10/10
remcosbuddy

Malware Config

Extracted

Family

remcos

Botnet

BUDDY

C2

192.210.201.57:52499

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-LMLI87

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      2492-25-0x0000000000400000-0x0000000000482000-memory.dmp

    • Size

      520KB

    • MD5

      897d8c5b4817ec0516bba1315be41ed8

    • SHA1

      3a11f30dc630d62f30871d3f254da5872c876e30

    • SHA256

      4e171601f47c1995bdec0a12860164d1feccc42a3a75d9ee6a0adb13fba69ce9

    • SHA512

      8b7e40baf7ba0ae1279ee0e9fd86d5fe1dea75b09e03440d6efdc1b1ea979c9aff66bf0affa58e5f0633871f98d7e613a8ee5fe9f031aa33f13e1c6035b1486b

    • SSDEEP

      6144:0XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNF5Gv:0X7tPMK8ctGe4Dzl4h2QnuPs/ZDwcv

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks