remcos | fe2a1954277140a39d0ae7dc4d386404e6ab667508fea97e3473b3be76d6ffb8 | Triage

Sharing

General

Target

fe2a1954277140a39d0ae7dc4d386404e6ab667508fea97e3473b3be76d6ffb8
Size

14.0MB
Sample

240917-nvktea1clh
MD5

72a907c9b957e0b25653d10c61be6086
SHA1

ae85c416ff5275c313338f492b077bbd2ade0424
SHA256

fe2a1954277140a39d0ae7dc4d386404e6ab667508fea97e3473b3be76d6ffb8
SHA512

154294ac1a187591010dc46caac3faf3f5ac0d0f8f2238e82b89bf9d720dfa6c736adae90ad3ca9abfa494a3bf6ba7a7f41393a2e14b3b35cf7cea00aa3a4d0a
SSDEEP

393216:wa/LeAvhoQUjzC3pIoQBvHjn6rDU7uC2qexGk09:PLhr8C3yosrgO2FGk09

Score

10^/10

remcos discovery rat

Malware Config

Targets

- Target
  
  fe2a1954277140a39d0ae7dc4d386404e6ab667508fea97e3473b3be76d6ffb8
- Size
  
  14.0MB
- MD5
  
  72a907c9b957e0b25653d10c61be6086
- SHA1
  
  ae85c416ff5275c313338f492b077bbd2ade0424
- SHA256
  
  fe2a1954277140a39d0ae7dc4d386404e6ab667508fea97e3473b3be76d6ffb8
- SHA512
  
  154294ac1a187591010dc46caac3faf3f5ac0d0f8f2238e82b89bf9d720dfa6c736adae90ad3ca9abfa494a3bf6ba7a7f41393a2e14b3b35cf7cea00aa3a4d0a
- SSDEEP
  
  393216:wa/LeAvhoQUjzC3pIoQBvHjn6rDU7uC2qexGk09:PLhr8C3yosrgO2FGk09
Score

10^/10

remcos discovery rat
- Remcos
  Remcos is a closed-source remote control and surveillance software.
  rat remcos
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

remcosdiscoveryrat

behavioral2

remcosdiscoveryrat