Overview

overview

10

Static

static

3

Remcos v5....ht.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Remcos-v5.1.2-Light.zip

  • Size

    38.2MB

  • Sample

    240907-hfbdjazejn

  • MD5

    4701a1b25a0d53660eed139a20d81c06

  • SHA1

    f24359d3e1abcf6f51163353f36f628771d00f48

  • SHA256

    36983e119052d1e3e4ebfc91dd66e33d22276600e2bfc5e17ce7f7122c7e482f

  • SHA512

    9a4c228416ff1e54469d6803400b97c559a471f4f3ee0ded679f6bc44e9bc470f104e88d91ba15b1a67ee61cf26ad86d4c31c53a2a271d9cd862cde091119b5a

  • SSDEEP

    786432:7w5O0MIsq510+4kNAS7itToYULsP3zXqh87K:SbMz3k2lmsP3Wh82

Score
10/10
remcosdiscoveryrat

Malware Config

Targets

    • Target

      Remcos v5.1.2 Light.exe

    • Size

      38.6MB

    • MD5

      aab49a7f7deba6b74049cea33dffb78f

    • SHA1

      11da313168c80b3eedcb5fe014c9403e64d5af11

    • SHA256

      e5387b78af0633c16fe10091130a69869d0ba984e472d5f0a9e01d4f1c7385a8

    • SHA512

      fc03b18b10f5c08fd12abf17f0b12183932e610e9e297a2c960a3bba8e9907b866b957e82ece70cd6517efc4872859eda587f76804969106197a1f015ab1004b

    • SSDEEP

      786432:E3C/xVfmzayg/pr61bCYH9tIiqZUX0W8JxkvgMWhcxbgrWi56oO:E36RG1/bIiqZUXyJxjc1ProO

    Score
    10/10
    remcosdiscoveryrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks