API tools faq
paste
ExecuteMalware

2021-07-14 Remcos IOCs

ExecuteMalware
Jul 14th, 2021
15,431
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.52 KB | None | 0 0
raw download clone embed print report
  1. THREAT IDENTIFICATION: REMCOS RAT
  2.  
  3. SUBJECTS OBSERVED
  4. Separate Remittance Advice: paper document number - 96972
  5.  
  6. SENDERS OBSERVED
  7. [email protected]
  8.  
  9. MALDOC FILE HASHES
  10. Chase Payment Advice_96972.docm
  11. 784a11e7c537bfe34e5287708cb0cb77
  12.  
  13. INTERMEDIATE PAYLOAD URLS
  14. http://192.227.158.111/jun.js
  15. http://192.227.158.111/fit.jpg
  16.  
  17. INTERMEDIATE PAYLOAD FILE HASHES
  18. jun.js
  19. ceb58144b89ea3c7d42611b451e21cb7
  20.  
  21. fit.jpg
  22. fdbac45ef0ed9de668c0740bd80e1379
  23.  
  24. REMCOS C2
  25. twistednerd.dvrlists.com
  26. https://141.98.102.243:41078
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!