Extracted

• • Target

    New REMCOS TES.exe

  • Size

    878KB

  • MD5

    611eb8ef2416aa09b16bbce28e1ec33a

  • SHA1

    20dfdd65a715575754c903ffcbe871ce82f2736b

  • SHA256

    c0b1ba178d886a9d71fb7ffd5b169bf023021e13c545e3cd8d15461221dd2006

  • SHA512

    63147896ce05d9f0a4e44f2f4a4d00f1a631219e114cb05ba40c662b0f6b828b9f95ba96a175503a6a496ad4c5e2b968f2c56ca8f0a8f782887e23ad2bdec023

  Score

  10^/10

  persistenceratremcos

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run entry to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2