Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f4630dcd34523d361a969a4e06633b9fc000849b34c55b59f72ae41aec0f182f.exe

  • Size

    481KB

  • Sample

    241207-d72btatqfx

  • MD5

    3150fd280a5ac05126b16f78e2f14146

  • SHA1

    80a9c99d50833aa770a6fc2a535723f723d70d7d

  • SHA256

    f4630dcd34523d361a969a4e06633b9fc000849b34c55b59f72ae41aec0f182f

  • SHA512

    3207e9b3c5b39745b99efa4109c96b193ab70e0abbee6b2fc2a323781a72fea3ce7d73395c57d0bf7262b58ffc2cd461f58da0574d866c312ed0418ecb5f8c8d

  • SSDEEP

    12288:7uD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDS/+DY:+09AfNIEYsunZvZ19Zgs

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

C2

ahmedahmed.ddns.net:6426

Attributes
  • audio_folder

    MicRecords

  • audio_path

    ApplicationPath

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-SEVL3E

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      f4630dcd34523d361a969a4e06633b9fc000849b34c55b59f72ae41aec0f182f.exe

    • Size

      481KB

    • MD5

      3150fd280a5ac05126b16f78e2f14146

    • SHA1

      80a9c99d50833aa770a6fc2a535723f723d70d7d

    • SHA256

      f4630dcd34523d361a969a4e06633b9fc000849b34c55b59f72ae41aec0f182f

    • SHA512

      3207e9b3c5b39745b99efa4109c96b193ab70e0abbee6b2fc2a323781a72fea3ce7d73395c57d0bf7262b58ffc2cd461f58da0574d866c312ed0418ecb5f8c8d

    • SSDEEP

      12288:7uD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDS/+DY:+09AfNIEYsunZvZ19Zgs

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.