Overview

overview

10

Static

static

10

6e0543ad43...cs.exe

windows7-x64

3

6e0543ad43...cs.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e0543ad43d17056c3e04148b0b20820_NeikiAnalytics.exe

  • Size

    469KB

  • Sample

    240526-ft9gdagb4s

  • MD5

    6e0543ad43d17056c3e04148b0b20820

  • SHA1

    f24b13cf0efdf86cfaeaf4dd4c6bafdb9f7aa655

  • SHA256

    99ad70288f0df716c052c9e366057d37170e9f8979385ae8be01c458ea3b8568

  • SHA512

    e2701b928c8d4e978a5ce41be7854144ea30c38569d91c27f6ae622f3dd73ae8b4099598fefa6a24cfd8bf42186780fb0c21b3ad354032a82655261a20c7139b

  • SSDEEP

    12288:omnk7iLJbpIpiRL6I2WrKQ9ZsfZQS9n9:YiLJbpI7I2WZqZ799

Score
10/10
remcosblessed

Malware Config

Extracted

Family

remcos

Botnet

blessed

C2

blessed.mypsx.net:4040

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-GGXX82

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    Remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      6e0543ad43d17056c3e04148b0b20820_NeikiAnalytics.exe

    • Size

      469KB

    • MD5

      6e0543ad43d17056c3e04148b0b20820

    • SHA1

      f24b13cf0efdf86cfaeaf4dd4c6bafdb9f7aa655

    • SHA256

      99ad70288f0df716c052c9e366057d37170e9f8979385ae8be01c458ea3b8568

    • SHA512

      e2701b928c8d4e978a5ce41be7854144ea30c38569d91c27f6ae622f3dd73ae8b4099598fefa6a24cfd8bf42186780fb0c21b3ad354032a82655261a20c7139b

    • SSDEEP

      12288:omnk7iLJbpIpiRL6I2WrKQ9ZsfZQS9n9:YiLJbpI7I2WZqZ799

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks