Extracted

• • Target

    21731d17093e84bd146460b533627120.exe

  • Size

    999KB

  • MD5

    21731d17093e84bd146460b533627120

  • SHA1

    4437ace2b80a89732e1f292d50e767b646c9b05a

  • SHA256

    974b3b9247ead5b640b495a96efba657ebee885fd25374e294ce55d7472ee402

  • SHA512

    eda88fb8c937b5cf071f6cf2b3c37af5b6885dcfd63100f065c3d81243d23c81a3a4df82782bfd6c7c06b17c5ffc2fa5d9a7a508a6136109218a0ad7a8e6c160

  Score

  10^/10

  remcospersistencerat

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2