General
-
Target
Shipping_Document.rar
-
Size
281KB
-
Sample
210722-3h5tnplfdn
-
MD5
74f39ffb7f3b9342ab047eaeb2c6205a
-
SHA1
1222a0a8490962d61efc0e3bfbd40d045d995d0c
-
SHA256
4a3ee480e184ee589aae2817674cf6ecdf9ed829db8388d7e85bc8a95bc69bd2
-
SHA512
51f9c784c316c09764eccbd5566070b7cb6b7f095c4bba54252002a2ddbffd74a73194ed5c286f889f8c8f9abc8d928971892fbe68617b9d66fbc9ad7e3e07af
Malware Config
Extracted
remcos
Young
june248.ddns.net:3759
-
audio_folder
MicRecords
-
audio_path
%AppData%
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
install_path
%AppData%
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
keylog_path
%AppData%
-
mouse_option
false
-
mutex
Remcos-4GJ3Q1
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
startup_value
Remcos
-
take_screenshot_option
false
-
take_screenshot_time
5
-
take_screenshot_title
notepad;solitaire;
Targets
-
-
Target
Shipping_Document.exe
-
Size
736KB
-
MD5
8809c7cab903669b1da338f39327a7c3
-
SHA1
7b19e931f2ab478e1189431a216f1cc2c9b43d8d
-
SHA256
86fffe8373d8bbcc79e4105465a3775bb9a2b4d35fb47961ab6173558bfeda14
-
SHA512
33bfbfd4729fb6ed94e27f323c668c92e7c1394e4628e236e16fff0bee0df0644ca29e666679e7a8b92cf077267aeff43bbf5c35e57d68ee80d11956cb246cac
Score10/10-
Remcos
Remcos is a closed-source remote control and surveillance software.
-