Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
Remcos RAT New TTPS – Detection & Response
Malware Families
Excerpt
Remcos is a remote access trojan – a malware used to take remote control over infected PCs.This trojan is created and sold to clients by a “business” called Breaking Security. Although Breaking Security promises that the program is only available to those who intend to use it for legal purposes, in reality, Remcos RAT gives clients all the necessary features to launch potentially destructive attacks. The malware can be purchased with different cryptocurrencies. Also…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 194.147.140.29 | High | Score 58/100 | First seen |
| MD5 | 8cea687c5c02c9b71303c53dc2641f03 | Medium | Score 53/100 | First seen |
| Domain | falimore001.hopto.org | High | Score 58/100 | First seen |
| MD5 | 6d25e04e66cccb61648f34728af7c2f2 | Medium | Score 53/100 | First seen |
| IP | 178.237.33.50 | High | Score 58/100 | First seen |
| MD5 | f331c18c3f685d245d40911d3bd20519 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…