General

  • Target

    1728080706a248a4f632b137f140bbdefdc6243fcfee4f77d8efc81faca52425088e5ea1dc575.dat-decoded.exe

  • Size

    483KB

  • Sample

    241004-2e76navapd

  • MD5

    c889bbf5b1e3688a1863be4080a67cdf

  • SHA1

    78917ebb95eda1e6ea617c9e52fa37cac374e487

  • SHA256

    c17f913d54daa4fc678b281988d2b6997ea93b6bd277bab6c3e222f60065887b

  • SHA512

    67fbb47e45d633c6a1631dbc9cfd47bbb3f567d11ae362b106edf197191800d2a3989b4454bca526b4e027d14940f1d54497e364090aebc6cc55beab3fcc3c74

  • SSDEEP

    6144:+XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNb5Gv:+X7tPMK8ctGe4Dzl4h2QnuPs/ZDScv

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

C2

sost2024ene.duckdns.org:1213

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-0AGASP

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      1728080706a248a4f632b137f140bbdefdc6243fcfee4f77d8efc81faca52425088e5ea1dc575.dat-decoded.exe

    • Size

      483KB

    • MD5

      c889bbf5b1e3688a1863be4080a67cdf

    • SHA1

      78917ebb95eda1e6ea617c9e52fa37cac374e487

    • SHA256

      c17f913d54daa4fc678b281988d2b6997ea93b6bd277bab6c3e222f60065887b

    • SHA512

      67fbb47e45d633c6a1631dbc9cfd47bbb3f567d11ae362b106edf197191800d2a3989b4454bca526b4e027d14940f1d54497e364090aebc6cc55beab3fcc3c74

    • SSDEEP

      6144:+XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNb5Gv:+X7tPMK8ctGe4Dzl4h2QnuPs/ZDScv

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.