Overview

overview

10

Static

static

10

2740-33-0x...ry.exe

windows7-x64

2740-33-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2740-33-0x0000000000400000-0x000000000047F000-memory.dmp

  • Size

    508KB

  • Sample

    241113-n4bxvs1flc

  • MD5

    004db89ad0b938b3ecf66e0ea6d10995

  • SHA1

    38a6d8dc8e181dd83c86a849e1faad0fdcd9fe4c

  • SHA256

    44cfa649bea8679a829c2ab0a8afbbea503189c9d48bd18747efece88f4e8e37

  • SHA512

    6569f5366cca7c9b8a9c9846f1de04bf1ebd9f36f91590c35c3c19d76e5a3eefa9b61998cc1c658cf2e3aa09cdcf2675250ab3f3e89542ff278b4f7eb68a384a

  • SSDEEP

    12288:Wmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSSn9:uiLJbpI7I2WhQqZ7S9

Score
10/10
remcosnov 12

Malware Config

Extracted

Family

remcos

Botnet

NOV 12

C2

leehoi01.ddns.net:9373

103.187.117.76:5584

154.216.18.171:5584

154.216.20.223:5584

leehoi02.ddns.net:9373

areabill.duckdns.org:9373
Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-KA6I08

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    Remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      2740-33-0x0000000000400000-0x000000000047F000-memory.dmp

    • Size

      508KB

    • MD5

      004db89ad0b938b3ecf66e0ea6d10995

    • SHA1

      38a6d8dc8e181dd83c86a849e1faad0fdcd9fe4c

    • SHA256

      44cfa649bea8679a829c2ab0a8afbbea503189c9d48bd18747efece88f4e8e37

    • SHA512

      6569f5366cca7c9b8a9c9846f1de04bf1ebd9f36f91590c35c3c19d76e5a3eefa9b61998cc1c658cf2e3aa09cdcf2675250ab3f3e89542ff278b4f7eb68a384a

    • SSDEEP

      12288:Wmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSSn9:uiLJbpI7I2WhQqZ7S9

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks