General
-
Target
2CBPOfVTs5QeG8Z.exe
-
Size
725KB
-
Sample
210113-s7cagy9ka2
-
MD5
7b709e3928fa5d957244a6620d546a7e
-
SHA1
fd6f4702fe9bcdcfc9555f50b2917ff6ca00ba12
-
SHA256
4e9dc740909974e7e5c1f5618bfba6192ada1ab988173685a50280bb4d232a5f
-
SHA512
4ecfad7f2221a1d37997aa40fc45bfb88a2630021cc3506b1c641a18913fb5944508f31f80f6b0d297031e3349d6a5034bb72c2a5ece181ce841576326faf970
Static task
static1
Behavioral task
behavioral1
Sample
2CBPOfVTs5QeG8Z.exe
Resource
win7v20201028
Malware Config
Extracted
remcos
185.244.26.208:29100
Targets
-
-
Target
2CBPOfVTs5QeG8Z.exe
-
Size
725KB
-
MD5
7b709e3928fa5d957244a6620d546a7e
-
SHA1
fd6f4702fe9bcdcfc9555f50b2917ff6ca00ba12
-
SHA256
4e9dc740909974e7e5c1f5618bfba6192ada1ab988173685a50280bb4d232a5f
-
SHA512
4ecfad7f2221a1d37997aa40fc45bfb88a2630021cc3506b1c641a18913fb5944508f31f80f6b0d297031e3349d6a5034bb72c2a5ece181ce841576326faf970
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-