Extracted

• • Target

    ATTACHEMENT___ PART SHIPMENT-FEDEX- cargo Arrival Notification Import Track No 283738293737 MR V FKUMAR.exe

  • Size

    1.4MB

  • MD5

    c19d596b1798a378a6b446b09490bac6

  • SHA1

    6cc157be6a544aa581c876b0ae3da67007583272

  • SHA256

    3309420da4cc8e91be71bd96a482fd2b544e2b1dd0d5a8e075b3cfe9bac1957f

  • SHA512

    26955839b01e887b2c0ed9547f04767a27d322394d02c2e52ab71ed198124863acd6b4e0bb7e8aa541567cc174c164b2162c5afaf9e9efe76db643f3becd279e

  • SSDEEP

    24576:wDVSydp4++i6NPXu+9Nj1WVSPKwf6CMMSA:wBZU++iFurniwfe4

  Score

  10^/10

  remcosremotehost reffrat

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2