General
- Target FRIEGHT PAYMENT 41,634.20 USD..exe
- Size 650KB
- Sample210430-54g7a8azzj
- SHA256 2782cd8a1b4f5152d56ae47c4af233a6d4ecb08f7fb23918467fbe5019c8a44d
Score
10/10
Malware Config
Targets
-
- Target FRIEGHT PAYMENT 41,634.20 USD..exe
- Size 650KB
- SHA256 2782cd8a1b4f5152d56ae47c4af233a6d4ecb08f7fb23918467fbe5019c8a44d
Score10/10-
Remcos
Remcos is a closed-source remote control and surveillance software.
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext