Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Four
ID: 04777395-2faa-57e8-ba44-9f74fa78243e
STIX ID: report--04777395-2faa-57e8-ba44-9f74fa78243e
Feed Name: Elastic Security Labs
Threat Score
This Elastic Security Labs report analyzes REMCOS v4.9.3, documenting its tactics (persistence, process injection, UAC bypass, evasion), information‑stealing capabilities (keylogging via SetWindowsHookEx, periodic screenshots, audio recordings), practical detection and hunting queries in KQL/ES|QL, a YARA rule, and sample hashes and C2 host/IP indicators to support detection and response.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.