Extracted

• • Target

    Factura Serfinanza015523916818153570120365653.exe

  • Size

    182KB

  • MD5

    baf64c11c421783c173c6e318ff09a55

  • SHA1

    887903c97a12c34c6aeb893c0ea0dc09650bb909

  • SHA256

    708bd4b84c02b04a8e1b7daa0f1966c09780788ef56062438fffe0543330255d

  • SHA512

    c6902b3021b0d0c14a7634aee8dca33fb14cd9afa2cb47f64792fad44e9e1457d228a822228cdaa21f422aaf8a11f79546eaba49986994a99d7e24751ff8dce2

  Score

  10^/10

  remcospersistencerat

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2