Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1733479274764e7b4f05da07e19f78d3cf31f2aafa2f5d7a78af2fd18749e25dbbc1473b66785.dat-decoded.exe

  • Size

    481KB

  • Sample

    241206-l2sfqaxphq

  • MD5

    03f3bfadc5679a6f341d5a7a492f2d9c

  • SHA1

    27ad31c8048ac0edf34d3fc3f9552dafc3758ea9

  • SHA256

    b06ddffdc6c7da2ba0e637228b48ca2a470aa8919707b8d22f68e68e83196ba6

  • SHA512

    fd3ee38ffe1d7e552caf2e24dd15ac6cf86d2d52897d75ce2ebbe54110dc52dcb953a6ce0df655dab882ced3841f40c27eb498ba099dc489d5a515f7d5595cf2

  • SSDEEP

    12288:tuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDSA+DY:g09AfNIEYsunZvZ19ZPs

Score
10/10

Malware Config

Extracted

Family

remcos

Botnet

x1x111

C2

148.113.165.11:4090

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    asasasa-H4TBM8

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      1733479274764e7b4f05da07e19f78d3cf31f2aafa2f5d7a78af2fd18749e25dbbc1473b66785.dat-decoded.exe

    • Size

      481KB

    • MD5

      03f3bfadc5679a6f341d5a7a492f2d9c

    • SHA1

      27ad31c8048ac0edf34d3fc3f9552dafc3758ea9

    • SHA256

      b06ddffdc6c7da2ba0e637228b48ca2a470aa8919707b8d22f68e68e83196ba6

    • SHA512

      fd3ee38ffe1d7e552caf2e24dd15ac6cf86d2d52897d75ce2ebbe54110dc52dcb953a6ce0df655dab882ced3841f40c27eb498ba099dc489d5a515f7d5595cf2

    • SSDEEP

      12288:tuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDSA+DY:g09AfNIEYsunZvZ19ZPs

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.