General

  • Target

    2ee1e4201c69f361a30b28aef54b3a56cf42a559d5c6101f11f51c38adca8f55.exe

  • Size

    487KB

  • Sample

    240830-m3djmazhne

  • MD5

    c3ef9a2bb537ce0e07b3c9e6afff2d7b

  • SHA1

    4f1b0310bf9cde6a34c9d44a0178082c140b420f

  • SHA256

    2ee1e4201c69f361a30b28aef54b3a56cf42a559d5c6101f11f51c38adca8f55

  • SHA512

    9ebdcab74a7521afe7e3693563a16dfaaeb87076f14c13895568e78ad072ad2be9a90a3c70f623e52dd9ac79ef9a809b505e58276cdc95fa6ff9fcf958df4678

  • SSDEEP

    6144:0Tz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZUAXMcr0T48:0TlrYw1RUh3NFn+N5WfIQIjbs/ZULT48

Malware Config

Extracted

Family

remcos

Botnet

feetfuck

C2

83.222.191.201:24251

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-XTJ1YO

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      2ee1e4201c69f361a30b28aef54b3a56cf42a559d5c6101f11f51c38adca8f55.exe

    • Size

      487KB

    • MD5

      c3ef9a2bb537ce0e07b3c9e6afff2d7b

    • SHA1

      4f1b0310bf9cde6a34c9d44a0178082c140b420f

    • SHA256

      2ee1e4201c69f361a30b28aef54b3a56cf42a559d5c6101f11f51c38adca8f55

    • SHA512

      9ebdcab74a7521afe7e3693563a16dfaaeb87076f14c13895568e78ad072ad2be9a90a3c70f623e52dd9ac79ef9a809b505e58276cdc95fa6ff9fcf958df4678

    • SSDEEP

      6144:0Tz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZUAXMcr0T48:0TlrYw1RUh3NFn+N5WfIQIjbs/ZULT48

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.