Overview

overview

10

Static

static

10

1738936383...ed.exe

windows7-x64

1

1738936383...ed.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    173893638335c53f1638bdbb2a3ec0e1ff38e066931e8948034d252d1ff84e0f466f014247933.dat-decoded.exe

  • Size

    482KB

  • Sample

    250207-q62measqgx

  • MD5

    87a11fa869ec9c0e5b9f423f9e753a46

  • SHA1

    668fdd736dea355ccf4eddafc2c6505b3172b579

  • SHA256

    aa1e1a4df252f3fe7849bb59a838a0b470861ba35a95632f18544ec3fa747e7e

  • SHA512

    743069ac25a497f0152fa038b036f10445e2d7b94bf3af7de290623d8b2d1722e5f5f1bf562d834ce3156d85a8563b6204f7164e5d0d0da518fb2d404122dbd8

  • SSDEEP

    12288:513ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQPahS:rak/mBXTV/R0nEF76gFZf

Score
10/10
remcosremotehostdiscovery

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

C2

172.245.208.17:1070

Attributes
  • audio_folder

    MicRecords

  • audio_path

    ApplicationPath

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-RNTKSL

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      173893638335c53f1638bdbb2a3ec0e1ff38e066931e8948034d252d1ff84e0f466f014247933.dat-decoded.exe

    • Size

      482KB

    • MD5

      87a11fa869ec9c0e5b9f423f9e753a46

    • SHA1

      668fdd736dea355ccf4eddafc2c6505b3172b579

    • SHA256

      aa1e1a4df252f3fe7849bb59a838a0b470861ba35a95632f18544ec3fa747e7e

    • SHA512

      743069ac25a497f0152fa038b036f10445e2d7b94bf3af7de290623d8b2d1722e5f5f1bf562d834ce3156d85a8563b6204f7164e5d0d0da518fb2d404122dbd8

    • SSDEEP

      12288:513ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQPahS:rak/mBXTV/R0nEF76gFZf

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks