Overview

overview

10

Static

static

10

59cb6a9cd3...ac.exe

windows7-x64

3

59cb6a9cd3...ac.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59cb6a9cd3f8b21b0f58b58c2c2838bf506115383cd22d871becbe77c29607ac.exe

  • Size

    372KB

  • Sample

    240828-b4xhca1fql

  • MD5

    8af0aada9ce90bbde536753129d0ceef

  • SHA1

    1cad36c9a69be8f09a0821e3cff07cd8d9c01016

  • SHA256

    59cb6a9cd3f8b21b0f58b58c2c2838bf506115383cd22d871becbe77c29607ac

  • SHA512

    542fee9f5ddeba1e436066d5590451d300afab706445c4f7c041066178ed175fae23ac31818c5a6df8fa63712d98122f9ecbff62384b61470b3aa7f37b7f0fee

  • SSDEEP

    6144:NhzOv2fM13jsIFSHNT7P/P6cZGbpYByPT7lyvIcCSIvF68fZZGbpYByPT7lyvIcU:N6sM9oIoH11vByPHly5lIvk8hvByPHlp

Score
10/10
remcospayloaddiscovery

Malware Config

Extracted

Family

remcos

Version

1.7 Pro

Botnet

Payload

C2

bazek.ddns.net:2444

Attributes
  • audio_folder

    audio

  • audio_path

    %AppData%

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    5

  • copy_file

    cmd.exe

  • copy_folder

    Command Prompt

  • delete_file

    true

  • hide_file

    true

  • hide_keylog_file

    false

  • install_flag

    false

  • install_path

    %WinDir%\System32

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • keylog_path

    %AppData%

  • mouse_option

    false

  • mutex

    jztkrquuwr

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screens

  • screenshot_path

    %AppData%

  • screenshot_time

    1

  • startup_value

    Windows Command Prompt

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      59cb6a9cd3f8b21b0f58b58c2c2838bf506115383cd22d871becbe77c29607ac.exe

    • Size

      372KB

    • MD5

      8af0aada9ce90bbde536753129d0ceef

    • SHA1

      1cad36c9a69be8f09a0821e3cff07cd8d9c01016

    • SHA256

      59cb6a9cd3f8b21b0f58b58c2c2838bf506115383cd22d871becbe77c29607ac

    • SHA512

      542fee9f5ddeba1e436066d5590451d300afab706445c4f7c041066178ed175fae23ac31818c5a6df8fa63712d98122f9ecbff62384b61470b3aa7f37b7f0fee

    • SSDEEP

      6144:NhzOv2fM13jsIFSHNT7P/P6cZGbpYByPT7lyvIcCSIvF68fZZGbpYByPT7lyvIcU:N6sM9oIoH11vByPHly5lIvk8hvByPHlp

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks