Malware Analysis — Ramcos RAT

Malware Analysis — Remcos RAT Ramcos RAT is a sophisticated type of malware called a remote access trojan (RAT). It evades antivirus detection and gives cybercriminals remote access and control over infected systems. Typically , it’s used for stealing information, installing more malware, or using the infected system in a botnet. MalwareBazaar sample Stage 1: As usual I downloaded the file and extracted it using the password “infected”. Original CMD file After extracting the…

Diamond Model