General

  • Target

    REMCOS v1.7 Professional By Viotto.rar

  • Size

    12.0MB

  • MD5

    f86ac0e2db32e57774d288fe2acbcfe7

  • SHA1

    846644486c5bd4927d8185399bda79ee32b7bdb5

  • SHA256

    fcf89228d1bf80eff09f0b7a3efffcd336af4d13a138d712408d8735aa523749

  • SHA512

    9c31f554e7ce787f6f82f14625583219d9e01f50e043d2797f38adc94dc7c3c2b48526de11ff3b6400014bcb72273b187e58e3471b69a61c3939ba8856a44292

  • SSDEEP

    196608:0HoSlu4Yz0zRdOC4DH6ErA+BXG8w5ulhPErGDXQjr6jediAkt0jvXecBh3wDUS46:RSLYz0ddvcH/L9Xmul0GXW6jlIbXeiGF

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • REMCOS v1.7 Professional By Viotto.rar
    .rar

    Password: infected

  • REMCOSAuthHooks.dll
    .dll windows x86

    Password: infected

    d452660aa6c160f2a66e1e195c1fec6c


    Headers

    Imports

    Sections

  • Remcos Loader.exe
    .exe windows x86

    Password: infected

    28751844dec40b40bddaf2626843d3ee


    Headers

    Imports

    Exports

    Sections

  • remcos.exe
    .exe windows x86

    Password: infected

    e2c065b1c331512012c564526756d6f2


    Headers

    Imports

    Exports

    Sections