Overview

overview

10

Static

static

10

1736348224...ed.exe

windows7-x64

3

1736348224...ed.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17363482249a873460757a9239193679567953c11d17b898ff9845034e34f5d2e7f4521342673.dat-decoded.exe

  • Size

    481KB

  • Sample

    250108-sb53fstpht

  • MD5

    ea495dd5eeb51bc22024728189eec9f5

  • SHA1

    16a1cfe7a570d466ac4ee04ccc1cb0e99a3d7f1d

  • SHA256

    c64be040beacfa41be4b8280b4b02a7cfd5d4d81a75bc94e81d0848b7baa2f4f

  • SHA512

    5f5a197b959a76627617afe71d6cc10a82e4db283a3e06e1c4ec036b7a530800d4e2f899cba87090cc389fbe11b78ed6e1b8e42175e11bbb8da9e947a1e5f7c5

  • SSDEEP

    12288:L9PgP3HAMwIGjY4vce6lnBthn5HSRVMf139F5woxr+IwtHwBtFhCsvZD5Y+P32:Z43HfwIGYMcn5PJrZq+

Score
10/10
remcos07-01-25discovery

Malware Config

Extracted

Family

remcos

Botnet

07-01-25

C2

municipioalcidiadechicamocha.ddnsgeek.com:1997

Attributes
  • audio_folder

    MicRecords

  • audio_path

    ApplicationPath

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-I3QM17

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      17363482249a873460757a9239193679567953c11d17b898ff9845034e34f5d2e7f4521342673.dat-decoded.exe

    • Size

      481KB

    • MD5

      ea495dd5eeb51bc22024728189eec9f5

    • SHA1

      16a1cfe7a570d466ac4ee04ccc1cb0e99a3d7f1d

    • SHA256

      c64be040beacfa41be4b8280b4b02a7cfd5d4d81a75bc94e81d0848b7baa2f4f

    • SHA512

      5f5a197b959a76627617afe71d6cc10a82e4db283a3e06e1c4ec036b7a530800d4e2f899cba87090cc389fbe11b78ed6e1b8e42175e11bbb8da9e947a1e5f7c5

    • SSDEEP

      12288:L9PgP3HAMwIGjY4vce6lnBthn5HSRVMf139F5woxr+IwtHwBtFhCsvZD5Y+P32:Z43HfwIGYMcn5PJrZq+

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks