Extracted

• • Target

    Quote.exe

  • Size

    233KB

  • MD5

    a96067cac28b1f5c3de4e1b6c7d0a402

  • SHA1

    51c65c8ece4bfd5c7d1b09105440f3f02d3b14ca

  • SHA256

    79e70809a85e291f9da3d391131208ce7645dd512eb6bb71811154b43da23222

  • SHA512

    1627058a9a884965bce4ece1ccf03c24a849cd79fe883c923ae2eb56c8e0bbb730cf823e550c080685af1f906a38f2847a65dc8ed236181d97eee9ddcfc3f96e

  Score

  10^/10

  remcospersistencerat

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2