Overview

overview

10

Static

static

10

2d3b381fbf...cs.exe

windows7-x64

10

2d3b381fbf...cs.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/05/2024, 02:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2d3b381fbf74084bf2183a3528d80750_NeikiAnalytics.exe
  • Size 124KB
  • Sample240528-cmr2zacb52
  • SHA256 291ee191047a5039399d50a349c0babaa936ac95235395c896d3e73579c2287d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
remcosrat

Malware Config

Signatures

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d3b381fbf74084bf2183a3528d80750_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2d3b381fbf74084bf2183a3528d80750_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4020

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        logs.dat
        • Path C:\Users\Admin\AppData\Roaming\remcos\logs.dat
        • Size 79B
        • SHA256 05e95ad00e7e55ba7ab2ca147a25cec0767c48664ce9b06a0f70c53d53885b52
        • MD5 SHA1 SHA512
        Submit Download