Overview

overview

10

Static

static

3

933c2c61a8...9N.exe

windows7-x64

10

933c2c61a8...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    933c2c61a8facd00921e5c1dd32ef4e28ce207024f7a7645a2ff011dd7934f39N.exe

  • Size

    2.0MB

  • Sample

    250323-abm8jatwgx

  • MD5

    c7dfbd56245199ddbcf753ce25171980

  • SHA1

    57957b930ff5623aa6db5dbff1c3dcdab45309d8

  • SHA256

    933c2c61a8facd00921e5c1dd32ef4e28ce207024f7a7645a2ff011dd7934f39

  • SHA512

    a28df5ededa594e0af24aa67bba26e71532bd6ebc617ea10ec3c087771e37650dd5751614b7d41b9c58a403e81cc61b5cf90014ea05d21d0feac1c4fc48f1d28

  • SSDEEP

    49152:zf6zWPhbAUmIeePjpMxKzvR9O7PoU4WBcOU7m69oU5e:zfsWN8elMxavmJ4jOU72U5e

Score
10/10
rmsdiscoveryrattrojan

Malware Config

Targets

    • Target

      933c2c61a8facd00921e5c1dd32ef4e28ce207024f7a7645a2ff011dd7934f39N.exe

    • Size

      2.0MB

    • MD5

      c7dfbd56245199ddbcf753ce25171980

    • SHA1

      57957b930ff5623aa6db5dbff1c3dcdab45309d8

    • SHA256

      933c2c61a8facd00921e5c1dd32ef4e28ce207024f7a7645a2ff011dd7934f39

    • SHA512

      a28df5ededa594e0af24aa67bba26e71532bd6ebc617ea10ec3c087771e37650dd5751614b7d41b9c58a403e81cc61b5cf90014ea05d21d0feac1c4fc48f1d28

    • SSDEEP

      49152:zf6zWPhbAUmIeePjpMxKzvR9O7PoU4WBcOU7m69oU5e:zfsWN8elMxavmJ4jOU72U5e

    Score
    10/10
    rmsdiscoveryrattrojan

    • RMS

      Remote Manipulator System (RMS) is a remote access tool developed by Russian organization TektonIT.

      trojanratrms

    • Rms family

      rms

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks