remcos | 254062f88f40324329b91a934ecd2b38355225a18f90e0d6f6588f8e181163b8 | Triage

Sharing

General

Target

remcos_a.exe
Size

428KB
Sample

250107-t11dya1kbq
MD5

c5f09b7719c8b0fff49750c4207b06b2
SHA1

a4e05827087c2db01d12677bde55079d549271a3
SHA256

254062f88f40324329b91a934ecd2b38355225a18f90e0d6f6588f8e181163b8
SHA512

d69a070d0ef9e937be6c5aba18ae21ba37f6a2c502a1b8d48ae9d088d338f3134b52ec1b920ceec9d2450b59bd90ac37b90b966ac3cabdc4304d83cb2b4742c0
SSDEEP

6144:++d2+U+8RRJorR7zu6tF9x46YGg83lgnbJHZFXUU01yC5wJ/3AO2HyXGcKcOMuf:++d3UGddn4F83l0JjXUU0kXAHTc/uf

Score

10^/10

remcos discovery

Malware Config

Targets

- Target
  
  remcos_a.exe
- Size
  
  428KB
- MD5
  
  c5f09b7719c8b0fff49750c4207b06b2
- SHA1
  
  a4e05827087c2db01d12677bde55079d549271a3
- SHA256
  
  254062f88f40324329b91a934ecd2b38355225a18f90e0d6f6588f8e181163b8
- SHA512
  
  d69a070d0ef9e937be6c5aba18ae21ba37f6a2c502a1b8d48ae9d088d338f3134b52ec1b920ceec9d2450b59bd90ac37b90b966ac3cabdc4304d83cb2b4742c0
- SSDEEP
  
  6144:++d2+U+8RRJorR7zu6tF9x46YGg83lgnbJHZFXUU01yC5wJ/3AO2HyXGcKcOMuf:++d3UGddn4F83l0JjXUU0kXAHTc/uf
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2