Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d.exe

  • Size

    481KB

  • Sample

    250109-cxevdstqgy

  • MD5

    3b2dfefa045f3257002ad8313e5d9db2

  • SHA1

    48b70b309dc15e419112e09c48c93145b6634019

  • SHA256

    63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d

  • SHA512

    ada39e1f3cba0c6307062eaeebd1b9ac53d57ee5195ba1c645f3d4b03dc3cb1e24c0c4dfc9a7d4e042981cd5561f9a5a2b55ad3e5df9b4efa74cf7e5eedea58a

  • SSDEEP

    12288:L9PgP3HAMwIGjY4vce6lnBthn5HSRVMf139F5woxr+IwtHwBtFhCsvZD5W+P32:Z43HfwIGYMcn5PJrZw+

Malware Config

Extracted

Family

remcos

Botnet

07-01-25

C2

municipioalcidiadechicamocha.ddnsgeek.com:1997

Attributes
  • audio_folder

    MicRecords

  • audio_path

    ApplicationPath

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-Y2VJ1N

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d.exe

    • Size

      481KB

    • MD5

      3b2dfefa045f3257002ad8313e5d9db2

    • SHA1

      48b70b309dc15e419112e09c48c93145b6634019

    • SHA256

      63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d

    • SHA512

      ada39e1f3cba0c6307062eaeebd1b9ac53d57ee5195ba1c645f3d4b03dc3cb1e24c0c4dfc9a7d4e042981cd5561f9a5a2b55ad3e5df9b4efa74cf7e5eedea58a

    • SSDEEP

      12288:L9PgP3HAMwIGjY4vce6lnBthn5HSRVMf139F5woxr+IwtHwBtFhCsvZD5W+P32:Z43HfwIGYMcn5PJrZw+

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.