General
-
Target
New_shipment_order#42542526_February.exe
-
Size
881KB
-
Sample
210226-xfsv75pla6
-
MD5
88f82763beb4dd0be4ea6cea7284e556
-
SHA1
0cdcfa4225242f4e953a3da53376b5639e5be856
-
SHA256
f1e9d6eb71a715e5f47a5c6fa5d03e9c3b871a0e88c91c709ff67ab9311caf4e
-
SHA512
2dc50f490d6c94247adc4d645ea4b27e201fe85340fbe8d51c622ce4d30ef512db57a8ef7eb0ce9d8bdc791bbfa16a097810d48d89942210bf31b36c8af00e6d
Static task
static1
Behavioral task
behavioral1
Sample
New_shipment_order#42542526_February.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
New_shipment_order#42542526_February.exe
Resource
win10v20201028
Malware Config
Extracted
remcos
gustavobillz.duckdns.org:57439
gustavobills.gotdns.ch:57439
Targets
-
-
Target
New_shipment_order#42542526_February.exe
-
Size
881KB
-
MD5
88f82763beb4dd0be4ea6cea7284e556
-
SHA1
0cdcfa4225242f4e953a3da53376b5639e5be856
-
SHA256
f1e9d6eb71a715e5f47a5c6fa5d03e9c3b871a0e88c91c709ff67ab9311caf4e
-
SHA512
2dc50f490d6c94247adc4d645ea4b27e201fe85340fbe8d51c622ce4d30ef512db57a8ef7eb0ce9d8bdc791bbfa16a097810d48d89942210bf31b36c8af00e6d
Score10/10-
Adds Run key to start application
-
Drops file in System32 directory
-