General

  • Target

    185.238.3.205_-_Remcos_1.7.zip___f50526188fa4929800cf2a0209fd414f.dat

  • Size

    12.1MB

  • MD5

    f50526188fa4929800cf2a0209fd414f

  • SHA1

    4d09dd7e1bacffb58e5f92532a199c2587693f04

  • SHA256

    1774d51fd45ee43fbae963e8f9a6e0d85460d2359bc578004ba58375fe5343c1

  • SHA512

    aeb7cf315ec7f2cad77c7812b5d23bd8bb1815214f7a0333997944a88f4aa09c93777c8d74eab6992fb47b73f93adf6bb57c31b8121d21555547ff5329307aaa

  • SSDEEP

    393216:/0FBWcJvUtoiW01LxFHZxDq1a5JhQvtcd3P:/S2XLx3xDhhm6l

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • 185.238.3.205_-_Remcos_1.7.zip___f50526188fa4929800cf2a0209fd414f.dat
    .zip
  • Remcos 1.7/REMCOSAuthHooks.dll
    .dll windows x86

    d452660aa6c160f2a66e1e195c1fec6c


    Headers

    Imports

    Sections

  • Remcos 1.7/Remcos Loader.exe
    .exe windows x86

    28751844dec40b40bddaf2626843d3ee


    Headers

    Imports

    Exports

    Sections

  • Remcos 1.7/remcos.exe
    .exe windows x86

    e2c065b1c331512012c564526756d6f2


    Headers

    Imports

    Exports

    Sections