remcos | b9820aff79bcbcf633402ec83d092c86af0f3de711cb6877e11b272b3c4e886e | Triage

Sharing

General

Target

9b4d402327b70396ae3e25c992497d55.exe
Size

7.5MB
Sample

241007-wce47s1bjj
MD5

9b4d402327b70396ae3e25c992497d55
SHA1

2a90004d00f4d87f18796e3b3393442e553eb028
SHA256

b9820aff79bcbcf633402ec83d092c86af0f3de711cb6877e11b272b3c4e886e
SHA512

4a53ff055e60d95ecd9a6cee76354857e094c09405cad410bee00a3a472042546200ee7bc5e2d73bb9c620894f2668b2a8e22940f5178711c5c8f349eeba0864
SSDEEP

98304:CKp5jJ5EVOzW8VrAqZkeNcX3NU3dW2/GSUJWXKtOLXfYxeZVSNbC+vw/qiYl7EqW:CEjJ5TpZkeNctAIJEivS0UE9s

Score

10^/10

remcos 03"""""octubre"""""2024 discovery rat

Malware Config

Extracted

Family

remcos

Botnet

03"""""OCtubre"""""2024

C2

098urni4389udn3u4imf8rufue.con-ip.com:5023

Attributes

audio_folder
MicRecords
audio_record_time
5
connect_delay
0
connect_interval
1
copy_file
remcos.exe
copy_folder
Remcos
delete_file
false
hide_file
false
hide_keylog_file
false
install_flag
false
keylog_crypt
false
keylog_file
logs.dat
keylog_flag
false
keylog_folder
remcos
mouse_option
false
mutex
Rmc-AMNTDK
screenshot_crypt
false
screenshot_flag
false
screenshot_folder
Screenshots
screenshot_path
%AppData%
screenshot_time
10
take_screenshot_option
false
take_screenshot_time
5

Targets

- Target
  
  9b4d402327b70396ae3e25c992497d55.exe
- Size
  
  7.5MB
- MD5
  
  9b4d402327b70396ae3e25c992497d55
- SHA1
  
  2a90004d00f4d87f18796e3b3393442e553eb028
- SHA256
  
  b9820aff79bcbcf633402ec83d092c86af0f3de711cb6877e11b272b3c4e886e
- SHA512
  
  4a53ff055e60d95ecd9a6cee76354857e094c09405cad410bee00a3a472042546200ee7bc5e2d73bb9c620894f2668b2a8e22940f5178711c5c8f349eeba0864
- SSDEEP
  
  98304:CKp5jJ5EVOzW8VrAqZkeNcX3NU3dW2/GSUJWXKtOLXfYxeZVSNbC+vw/qiYl7EqW:CEjJ5TpZkeNctAIJEivS0UE9s
Score

10^/10

remcos 03"""""octubre"""""2024 discovery rat
- Remcos
  Remcos is a closed-source remote control and surveillance software.
  rat remcos
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

remcos03"""""octubre"""""2024discoveryrat

behavioral2

remcos03"""""octubre"""""2024discoveryrat