Overview

overview

10

Static

static

3

c4b208d1dc...18.exe

windows7-x64

10

c4b208d1dc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4b208d1dcd9fead7156bd52e52b437e_JaffaCakes118

  • Size

    346KB

  • Sample

    240827-k19g6svdjl

  • MD5

    c4b208d1dcd9fead7156bd52e52b437e

  • SHA1

    76ca925c8b66c09abfff9511a36e62e56cdae984

  • SHA256

    36b39a8d628be83d55a46e85f4040389a0389e84a9efe2d1146a67431dbf206e

  • SHA512

    162f46e005232b5a999a3c0f59e36afa7556e05aad48fd1357574d01abd165d788e3a80b22715a0663c6942682ccf95dfdfea7dc3461d1da41d8755043b42896

  • SSDEEP

    6144:3BZIHsTECD6dtSpRPhxBBvSgcSmzlcASGtV1fDa7dOEO5G:3BZOwhzAtLlcASGtV1fDa7dOEO

Score
10/10
remcosdiscoveryrat

Malware Config

Targets

    • Target

      c4b208d1dcd9fead7156bd52e52b437e_JaffaCakes118

    • Size

      346KB

    • MD5

      c4b208d1dcd9fead7156bd52e52b437e

    • SHA1

      76ca925c8b66c09abfff9511a36e62e56cdae984

    • SHA256

      36b39a8d628be83d55a46e85f4040389a0389e84a9efe2d1146a67431dbf206e

    • SHA512

      162f46e005232b5a999a3c0f59e36afa7556e05aad48fd1357574d01abd165d788e3a80b22715a0663c6942682ccf95dfdfea7dc3461d1da41d8755043b42896

    • SSDEEP

      6144:3BZIHsTECD6dtSpRPhxBBvSgcSmzlcASGtV1fDa7dOEO5G:3BZOwhzAtLlcASGtV1fDa7dOEO

    Score
    10/10
    remcosdiscoveryrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks