Overview

overview

10

Static

static

10

2008-63-0x...ry.exe

windows7-x64

2008-63-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2008-63-0x0000000000400000-0x0000000000482000-memory.dmp

  • Size

    520KB

  • Sample

    240527-n1vwkaad5y

  • MD5

    ee888c576e1e691bfeafe416fa834621

  • SHA1

    5324756ba32fb796368e273c86d5e3f310c63ad2

  • SHA256

    0478afd55573cc583a69f7d9d2135f9133a8ac43b2b8ae37418855ec2731067e

  • SHA512

    289067b0bf21880cdc68657175f5f6f000f99458a6d09060976934e0fca229b0719fdbfa3ec03b74cea0e7b07ee40da798f695e81af9c718dccc83fecc074adf

  • SSDEEP

    6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoH1csAOZZsAX4cxy5Gv:8X7tPMK8ctGe4Dzl4h2QnuYs/Zszcv

Score
10/10
remcosiruka

Malware Config

Extracted

Family

remcos

Botnet

iruka

C2

91.223.3.151:4508

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-TG1HDZ

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      2008-63-0x0000000000400000-0x0000000000482000-memory.dmp

    • Size

      520KB

    • MD5

      ee888c576e1e691bfeafe416fa834621

    • SHA1

      5324756ba32fb796368e273c86d5e3f310c63ad2

    • SHA256

      0478afd55573cc583a69f7d9d2135f9133a8ac43b2b8ae37418855ec2731067e

    • SHA512

      289067b0bf21880cdc68657175f5f6f000f99458a6d09060976934e0fca229b0719fdbfa3ec03b74cea0e7b07ee40da798f695e81af9c718dccc83fecc074adf

    • SSDEEP

      6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoH1csAOZZsAX4cxy5Gv:8X7tPMK8ctGe4Dzl4h2QnuYs/Zszcv

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks