General
-
Target
Application Form.exe
-
Size
620KB
-
Sample
210114-n9npsn6ga2
-
MD5
ea431733561c16e385bedd8478522598
-
SHA1
b56c6bf369510cad2dec8356b330a96d6a060bab
-
SHA256
9888381eb68d98f0581ab81845f2fc9e15af6ba1193a131bdf60497e3a3d1247
-
SHA512
bcc536bb79caf6e43ba661669e8e166b94a7f78a5b094a11f851876c889d573b5801dd655240be163ea7a2f56f6fefb5698e64f9791dff0ce08126eb7760f9be
Static task
static1
Behavioral task
behavioral1
Sample
Application Form.exe
Resource
win7v20201028
Malware Config
Extracted
remcos
Toolz.mywire.org:4499
Targets
-
-
Target
Application Form.exe
-
Size
620KB
-
MD5
ea431733561c16e385bedd8478522598
-
SHA1
b56c6bf369510cad2dec8356b330a96d6a060bab
-
SHA256
9888381eb68d98f0581ab81845f2fc9e15af6ba1193a131bdf60497e3a3d1247
-
SHA512
bcc536bb79caf6e43ba661669e8e166b94a7f78a5b094a11f851876c889d573b5801dd655240be163ea7a2f56f6fefb5698e64f9791dff0ce08126eb7760f9be
-
Suspicious use of SetThreadContext
-