Overview

overview

10

Static

static

10

b659153a65...2b.exe

windows7-x64

10

b659153a65...2b.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 02:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b659153a656edc808c9870371571beac589bc088dd3d80c55500328554e26f2b.exe

  • Size

    124KB

  • MD5

    6c2bba6a42a036a1519342ead85dd0ea

  • SHA1

    ac4fc9fd191266231f7afafed73da97d77248014

  • SHA256

    b659153a656edc808c9870371571beac589bc088dd3d80c55500328554e26f2b

  • SHA512

    63c2ca0843e069dba2d56431269742056950bbbd772cb798e6786ebdbe1ea9ac26d6a8d2f32590e19acbcd95b01d39ab623c039facf79d4aaf1855561e7415d2

  • SSDEEP

    3072:MGuV8ukp57/RLyBlNJo4s5ln8m5IYNGDk4Ozqhcwrc+5:MGuVUD7/5yBP3s5p8m5IYNGDtOzqhc8

Score
10/10
remcosrat

Malware Config

Signatures

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b659153a656edc808c9870371571beac589bc088dd3d80c55500328554e26f2b.exe
    "C:\Users\Admin\AppData\Local\Temp\b659153a656edc808c9870371571beac589bc088dd3d80c55500328554e26f2b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\remcos\logs.dat
    Filesize

    79B

    MD5

    90b62d88e37a16d32a4867ef6240523d

    SHA1

    11f4365b42bc5fd444a225f8d6f97088353f017b

    SHA256

    6e690f08401d0365362d755342557d26ae874fac9edcd80420a7819f8e93d36e

    SHA512

    1a4a0973c406ae625080be85fb6815563e684e5c35f4e99b343f5d964370137fadd0d57ba2156bc831936cbb390a49b5c9fafe2c06ace10bbf5004886c8f2676

    Download Submit