Overview

overview

10

Static

static

3

fb4fb51890...18.exe

windows7-x64

10

fb4fb51890...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb4fb518905944d8d40f97c13a1a5578_JaffaCakes118

  • Size

    2.5MB

  • Sample

    241218-nadvcswnhx

  • MD5

    fb4fb518905944d8d40f97c13a1a5578

  • SHA1

    87791ebc36c32c5623dae7e32c375d39cb7abcd3

  • SHA256

    50915f0f6260856a025536f2e78c82d605e522d7051600545ab94f887bf4cfc5

  • SHA512

    07dd64fbe898dd173f19b93d29876e0ea294bdfda2d4a15e4366efbf5b15a967f1fed48860e51f1fb49d8183486c38b18ec797f21dba5e280b9bb0818ce12aee

  • SSDEEP

    49152:t848Edrt/PRv5ytQzhEP8aebD0KkslOcSDnYrPg3CvH7QDAYDvzs/3ffwva+f:t26p/phyueP8aebDQiOcSYzgx7zifZ+f

Score
10/10
remcosdiscoveryrat

Malware Config

Targets

    • Target

      fb4fb518905944d8d40f97c13a1a5578_JaffaCakes118

    • Size

      2.5MB

    • MD5

      fb4fb518905944d8d40f97c13a1a5578

    • SHA1

      87791ebc36c32c5623dae7e32c375d39cb7abcd3

    • SHA256

      50915f0f6260856a025536f2e78c82d605e522d7051600545ab94f887bf4cfc5

    • SHA512

      07dd64fbe898dd173f19b93d29876e0ea294bdfda2d4a15e4366efbf5b15a967f1fed48860e51f1fb49d8183486c38b18ec797f21dba5e280b9bb0818ce12aee

    • SSDEEP

      49152:t848Edrt/PRv5ytQzhEP8aebD0KkslOcSDnYrPg3CvH7QDAYDvzs/3ffwva+f:t26p/phyueP8aebDQiOcSYzgx7zifZ+f

    Score
    10/10
    remcosdiscoveryrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Remcos family

      remcos

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks