General
-
Target
d9f5a00249d4c51d12537df7e56145df7f06ef4b73e24887d296f24bc3c02111
-
Size
994KB
-
Sample
210505-9gwjxmlav2
-
MD5
0b97fa38e959240aaa8d2ba954fa3dd2
-
SHA1
9824aeb94a7b4a52959df5d96f1e36e871036693
-
SHA256
d9f5a00249d4c51d12537df7e56145df7f06ef4b73e24887d296f24bc3c02111
-
SHA512
852414a5057aa901f8e2907e7124ea92b9fd6e72d24fb5f4deb5768da2baf699384eb5d40eb043aa16a91c4684025b98e44ad21ff17bb8bcf28495cf3e11fba0
Static task
static1
Behavioral task
behavioral1
Sample
d9f5a00249d4c51d12537df7e56145df7f06ef4b73e24887d296f24bc3c02111.exe
Resource
win7v20210408
Malware Config
Extracted
remcos
rem-pounds.ddns.net:9970
Targets
-
-
Target
d9f5a00249d4c51d12537df7e56145df7f06ef4b73e24887d296f24bc3c02111
-
Size
994KB
-
MD5
0b97fa38e959240aaa8d2ba954fa3dd2
-
SHA1
9824aeb94a7b4a52959df5d96f1e36e871036693
-
SHA256
d9f5a00249d4c51d12537df7e56145df7f06ef4b73e24887d296f24bc3c02111
-
SHA512
852414a5057aa901f8e2907e7124ea92b9fd6e72d24fb5f4deb5768da2baf699384eb5d40eb043aa16a91c4684025b98e44ad21ff17bb8bcf28495cf3e11fba0
-
Drops startup file
-
Suspicious use of SetThreadContext
-