Extracted

• • Target

    Shipment Document BL,INV and packing list.jpg.exe

  • Size

    659KB

  • MD5

    fe59b9e260519d6227ff7e239c9d0a04

  • SHA1

    577f9d0d5fd671a83caad0cfe241fbf724d372fc

  • SHA256

    57294ac308436e17b7e99da25f3d0fa1eb0a466572bed8ee736e078d0dc8042f

  • SHA512

    30f90794a594bb0f68f04089f4f367d7251e24c25d073386eb6f2df7d847d558ea859d4404632d069041ac0157952db95f13e064fef5f3a968dd227a341eea59

  Score

  10^/10

  ratremcospersistence

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run entry to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2