Part 1. Malware Analysis-Remcos RAT
Tags
| attack-pattern: | Data Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 5ddeaba1-8958-4b38-8750-0d6bd9d3ce88 |
| Fingerprint | 2f5c981debbb0340 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Sept. 24, 2024, 11:44 a.m. |
| Added to db | Sept. 24, 2024, 2:14 p.m. |
| Last updated | Nov. 17, 2024, 6:54 p.m. |
| Headline | Part 1. Malware Analysis-Remcos RAT |
| Title | Part 1. Malware Analysis-Remcos RAT |
| Detected Hints/Tags/Attributes | 20/1/9 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 168 | ✔ | Infosec on Medium | https://medium.com/feed/tag/infosec | 2024-08-30 22:08 |
| Details | 171 | ✔ | Malware on Medium | https://medium.com/feed/tag/malware | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 93 | bazaar.abuse.ch |
|
| Details | Domain | 1 | rechftankholding.com |
|
| Details | File | 1 | tnnz.exe |
|
| Details | File | 1 | remcosrat.exe |
|
| Details | File | 249 | schtasks.exe |
|
| Details | File | 70 | vbc.exe |
|
| Details | File | 13 | logs.dat |
|
| Details | sha256 | 1 | c1f36f8ad9a6360ed406ff3e84dd9b9a765e6edea3d9beb7e5c303230001fd13 |
|
| Details | Url | 1 | https://bazaar.abuse.ch/sample/c1f36f8ad9a6360ed406ff3e84dd9b9a765e6edea3d9beb7e5c303230001fd13 |