Overview

overview

10

Static

static

3

779605a717...7e.exe

windows7-x64

10

779605a717...7e.exe

windows10-2004-x64

7

$PLUGINSDIR/awjx.dll

windows7-x64

10

$PLUGINSDIR/awjx.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    779605a717a75905d70a752b8199f26598079a9cefaa4ee1768cf1083712f47e.exe

  • Size

    662KB

  • Sample

    241123-r4vxhssrfr

  • MD5

    62a83d982c702f0a42aa618a95959987

  • SHA1

    4e024ad04b914afba1efc8b161860674da40c75a

  • SHA256

    779605a717a75905d70a752b8199f26598079a9cefaa4ee1768cf1083712f47e

  • SHA512

    2ca5c2a71d137ae6e5e3eec856e62dd6d99911bc76e68f23eb128bd7fab7e3e1c3a70a04b5559ef62789b70c386b421b06d981b1f55ec9103282992ff91ae398

  • SSDEEP

    12288:ptnlaPwq8HRQoWR87YSdEEYunKDLnWFcyCcPMweEP:PAKHyoWR87YSGWKXccDcPfP

Score
10/10
remcosdiscoveryrat

Malware Config

Targets

    • Target

      779605a717a75905d70a752b8199f26598079a9cefaa4ee1768cf1083712f47e.exe

    • Size

      662KB

    • MD5

      62a83d982c702f0a42aa618a95959987

    • SHA1

      4e024ad04b914afba1efc8b161860674da40c75a

    • SHA256

      779605a717a75905d70a752b8199f26598079a9cefaa4ee1768cf1083712f47e

    • SHA512

      2ca5c2a71d137ae6e5e3eec856e62dd6d99911bc76e68f23eb128bd7fab7e3e1c3a70a04b5559ef62789b70c386b421b06d981b1f55ec9103282992ff91ae398

    • SSDEEP

      12288:ptnlaPwq8HRQoWR87YSdEEYunKDLnWFcyCcPMweEP:PAKHyoWR87YSGWKXccDcPfP

    Score
    10/10
    remcosdiscoveryrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Remcos family

      remcos

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/awjx.dll

    • Size

      20KB

    • MD5

      213e480b87636c56a73a61de53f0c3c8

    • SHA1

      0425ea30b6ae2eca54a8e55e1b7950dc0f5c1412

    • SHA256

      f8c73afa54aeed213fe0f60b0f3fd7e95ad292941a1dcd7cb9d94dc3b0571637

    • SHA512

      7b326838f0a8a214a932f58c66a37b0d6c7972e0ec089f7528c34041b8891c4a4b71d99d7630ff5c4bcbca83cd2aa25b4e8da30bdb1755339aa7ee5d079a4d34

    • SSDEEP

      384:1MO3lld/IM9avqotPg761Zl4ODA23hN28BfYe:1v3lldQM9Gg21oOpzdV

    Score
    10/10
    remcosdiscoveryrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Remcos family

      remcos

    • Suspicious use of SetThreadContext

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks