General
-
Target
21731d17093e84bd146460b533627120.exe
-
Size
999KB
-
Sample
210423-3n2khnfvq2
-
MD5
21731d17093e84bd146460b533627120
-
SHA1
4437ace2b80a89732e1f292d50e767b646c9b05a
-
SHA256
974b3b9247ead5b640b495a96efba657ebee885fd25374e294ce55d7472ee402
-
SHA512
eda88fb8c937b5cf071f6cf2b3c37af5b6885dcfd63100f065c3d81243d23c81a3a4df82782bfd6c7c06b17c5ffc2fa5d9a7a508a6136109218a0ad7a8e6c160
Static task
static1
Behavioral task
behavioral1
Sample
21731d17093e84bd146460b533627120.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
21731d17093e84bd146460b533627120.exe
Resource
win10v20210408
Malware Config
Extracted
remcos
fieldsdegreenf.duckdns.org:6553
aaeeerbbbeee.duckdns.org:6553
Targets
-
-
Target
21731d17093e84bd146460b533627120.exe
-
Size
999KB
-
MD5
21731d17093e84bd146460b533627120
-
SHA1
4437ace2b80a89732e1f292d50e767b646c9b05a
-
SHA256
974b3b9247ead5b640b495a96efba657ebee885fd25374e294ce55d7472ee402
-
SHA512
eda88fb8c937b5cf071f6cf2b3c37af5b6885dcfd63100f065c3d81243d23c81a3a4df82782bfd6c7c06b17c5ffc2fa5d9a7a508a6136109218a0ad7a8e6c160
Score10/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-