Family: Remcos

Remcos is a closed-source remote control and surveillance software.

Suricata alert: REMCOS RAT Malware Inbound C2 Communication

Network activity triggered a Suricata alert

Suricata alert: REMCOS RAT Malware Outbound C2 Communication

Network activity triggered a Suricata alert

Command and Scripting Interpreter: PowerShell

Run Powershell and hide display window.

Command and Scripting Interpreter: PowerShell

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

Downloads MZ/PE file