Overview

overview

10

Static

static

5

e6d5da214f...18.exe

windows7-x64

10

e6d5da214f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6d5da214f6b2eabbf79e165a1fa04a1_JaffaCakes118

  • Size

    994KB

  • Sample

    240917-ptmr2stcmr

  • MD5

    e6d5da214f6b2eabbf79e165a1fa04a1

  • SHA1

    0ae4949b4623640bfce375f7947be3a0f1d02531

  • SHA256

    1d88df31bc788eddf044ef1c51b08f69e20cd4345bf3fa231916c6df9ddc8297

  • SHA512

    2e36eb2df2524227c3b9a77cbbe8237b41d973d1ece05a92f829c14b2b6e0f2d57c7b02ca4c82919e7f44936e61dd62acf90328f9d0c20f2ac781a332fb8f022

  • SSDEEP

    24576:Hu6J33O0c+JY5UZ+XC0kGso6FalGou0KWY:Bu0c++OCvkGs9FalvuoY

Score
10/10
remcosdiscoveryratupx

Malware Config

Targets

    • Target

      e6d5da214f6b2eabbf79e165a1fa04a1_JaffaCakes118

    • Size

      994KB

    • MD5

      e6d5da214f6b2eabbf79e165a1fa04a1

    • SHA1

      0ae4949b4623640bfce375f7947be3a0f1d02531

    • SHA256

      1d88df31bc788eddf044ef1c51b08f69e20cd4345bf3fa231916c6df9ddc8297

    • SHA512

      2e36eb2df2524227c3b9a77cbbe8237b41d973d1ece05a92f829c14b2b6e0f2d57c7b02ca4c82919e7f44936e61dd62acf90328f9d0c20f2ac781a332fb8f022

    • SSDEEP

      24576:Hu6J33O0c+JY5UZ+XC0kGso6FalGou0KWY:Bu0c++OCvkGs9FalvuoY

    Score
    10/10
    remcosdiscoveryratupx

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks