Rewterz Threat Alert – Remcos RAT – Fresh IOCs - Rewterz
Tags
| country: | Germany |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 427084d2-1627-4608-906a-005e1c78196d |
| Fingerprint | 809602456f0daf4d |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Aug. 23, 2021, 5:23 p.m. |
| Added to db | Dec. 19, 2024, 9:04 a.m. |
| Last updated | Dec. 20, 2024, 10:19 p.m. |
| Headline | Rewterz Threat Alert – Remcos RAT – Fresh IOCs |
| Title | Rewterz Threat Alert – Remcos RAT – Fresh IOCs - Rewterz |
| Detected Hints/Tags/Attributes | 24/3/17 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 4 | cve-2021-35940 |
|
| Details | md5 | 1 | f53b11a4a12f5bc26b12dfb56ee3f35e |
|
| Details | md5 | 1 | 94972e1370ad4c3e321804cef17571c2 |
|
| Details | md5 | 1 | 5e9770c2b22b03e5726285900afab954 |
|
| Details | md5 | 1 | e87c8450d5341b5057ee88b95581cf87 |
|
| Details | md5 | 1 | a971816d5dafc580f32f3f6481757f0c |
|
| Details | sha1 | 1 | 53398cac5860fc249d1b0ab188a083d895a46a07 |
|
| Details | sha1 | 1 | ed8ea21cf1de27841e8f5f3c46a3dd5503d0f133 |
|
| Details | sha1 | 1 | 0be9416d3ca3ab36ffa1f2da9f3d20d4841bb468 |
|
| Details | sha1 | 1 | acda7453a1d8c9d737bc5cc699b237577fa074a1 |
|
| Details | sha1 | 1 | f6fe675fde2e1b4386a0754c835e885efc489a46 |
|
| Details | sha256 | 1 | 3bfc1578a54adf8fddb981d461ebc6f6d730fd7cfbf69bb1df421043210a26fb |
|
| Details | sha256 | 1 | 1b7b3016fc40081b48b4fee22b7ea4cc5cc8fc65d3f74e54a29073dc1b7cae72 |
|
| Details | sha256 | 1 | ad3dc7a0c6ce33a7e45775b3452343eb748fab8823311df58d4599d6a203ff80 |
|
| Details | sha256 | 1 | 7dde2b2c43cf73df85a4712a0c10b5b76cae5b0f29ff5913ce10f24613edc895 |
|
| Details | sha256 | 1 | 43950f092deb41fbeea81df693331bd9328941abb3e3f27600a9d35b519eed3a |
|
| Details | Windows Registry Key | 50 | HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce |