Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
6 IOCs

Remcos RAT New TTPS – Detection & Response

Security Investigation
Security Investigation
Published August 29, 2022Original Report

Malware Families

Excerpt

Remcos is a remote access trojan – a malware used to take remote control over infected PCs.This trojan is created and sold to clients by a “business” called Breaking Security.  Although Breaking Security promises that the program is only available to those who intend to use it for legal purposes, in reality, Remcos RAT gives clients all the necessary features to launch potentially destructive attacks. The malware can be purchased with different cryptocurrencies. Also…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE194.147.140.29falimore001.hopto.org178.237.33.50CAPABILITYQakBotRemcosVICTIMunknown
Adversary
Infrastructure(3)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

6 indicators

TypeIndicatorConfidenceScoreFirst Seen
IP194.147.140.29HighScore 58/100First seen
MD58cea687c5c02c9b71303c53dc2641f03MediumScore 53/100First seen
Domainfalimore001.hopto.orgHighScore 58/100First seen
MD56d25e04e66cccb61648f34728af7c2f2MediumScore 53/100First seen
IP178.237.33.50HighScore 58/100First seen
MD5f331c18c3f685d245d40911d3bd20519MediumScore 53/100First seen

IOC Relationship Graph

Building graph…