Malware Signature
The following table shows a list of malware samples and the corresponding botnet C&C (ip:port) associated with RemcosRAT
Database Entry
| Malware: | RemcosRAT |
|---|---|
| First seen: | 2019-01-31 00:07:47 UTC |
| Last seen: | 2023-12-31 16:25:30 UTC |
Malware Samples
The table below documents all malware samples associated with this malware family.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2023-12-31 16:25:30 | 65ae2a6c5538d0dcd50c3c264587bb04 |  42 / 69 (60.87%)
| RemcosRAT | 15.235.3.1:2000 |
| 2023-12-31 16:25:30 | 65ae2a6c5538d0dcd50c3c264587bb04 | 42 / 69 (60.87%)
| RemcosRAT | 15.235.3.1:2001 |
| 2023-09-08 14:54:01 | 4719f04e68dfaad4767604118fed7251 | 51 / 71 (71.83%)
| RemcosRAT | 179.13.2.154:7000 |
| 2023-09-08 14:54:01 | 4719f04e68dfaad4767604118fed7251 | 51 / 71 (71.83%)
| RemcosRAT | 179.13.2.154:7000 |
| 2023-09-07 19:33:04 | bb07f51bd5bcb653c780f736b76c68b7 | 55 / 71 (77.46%)
| RemcosRAT | 179.13.2.154:7000 |
| 2023-09-07 19:33:04 | bb07f51bd5bcb653c780f736b76c68b7 | 55 / 71 (77.46%)
| RemcosRAT | 179.13.2.154:7000 |
| 2022-08-11 12:11:49 | a27f1e02ffbc61c255088c64587af706 | n/a | RemcosRAT | 194.5.97.232:3738 |
| 2022-08-11 12:04:45 | 12104e63b3913da5445eca8b290a1d0f | n/a | RemcosRAT | 194.5.97.232:3738 |
| 2022-03-14 05:46:49 | a07c221c9f3dc8fcb886290fab3ce121 | n/a | RemcosRAT | 194.31.98.58:2405 |
| 2022-03-14 05:32:25 | 721923313c6113875e9178045c4e3fac | n/a | RemcosRAT | 194.31.98.58:2405 |
| 2020-07-23 12:42:09 | 838124a47cae47dae28f95301ca83f05 | n/a | RemcosRAT | 91.234.99.15:443 |
| 2020-07-23 12:42:09 | 838124a47cae47dae28f95301ca83f05 | n/a | RemcosRAT | 91.234.99.15:443 |
| 2020-04-19 17:14:32 | d666af42aa577751e151aad9b944859e | 43 / 71 (60.56%)
| RemcosRAT | 83.11.162.79:1080 |
| 2020-04-19 17:14:32 | d666af42aa577751e151aad9b944859e | 43 / 71 (60.56%)
| RemcosRAT | 83.11.162.79:1080 |
| 2019-08-20 09:24:33 | 12a25ea65d762c9e289eb6c2b8a01a86 | 21 / 69 (30.43%)
| RemcosRAT | 185.244.31.92:9341 |
| 2019-08-20 09:24:33 | 12a25ea65d762c9e289eb6c2b8a01a86 | 21 / 69 (30.43%)
| RemcosRAT | 185.244.31.92:9341 |
| 2019-08-19 15:21:36 | a2c8fd26d524fb11b20972ba8cb9d6bc | 31 / 66 (46.97%)
| RemcosRAT | 185.244.31.92:9341 |
| 2019-08-19 15:21:36 | a2c8fd26d524fb11b20972ba8cb9d6bc | 31 / 66 (46.97%)
| RemcosRAT | 185.244.31.92:9341 |
| 2019-08-17 11:15:03 | 7494fe51ec048544f2f5d56b469cae49 | 41 / 70 (58.57%)
| RemcosRAT | 185.244.31.92:9341 |
| 2019-08-17 11:15:03 | 7494fe51ec048544f2f5d56b469cae49 | 41 / 70 (58.57%)
| RemcosRAT | 185.244.31.92:9341 |
| 2019-06-24 05:22:33 | 94cc784cd6ab459d61872e6f2accb04d | 14/71 (19.72%)
| RemcosRAT | 93.90.193.189:9341 |
| 2019-06-24 05:22:33 | 94cc784cd6ab459d61872e6f2accb04d | 14/71 (19.72%)
| RemcosRAT | 93.90.193.189:9341 |
| 2019-01-31 00:07:47 | b6434a598fac80550406c1cc45a6b441 | 5/60 (8.33%)
| RemcosRAT | 185.244.30.105:5689 |
| 2019-01-31 00:07:47 | b6434a598fac80550406c1cc45a6b441 | 5/60 (8.33%)
| RemcosRAT | 185.244.30.105:5689 |