General
-
Target
56045d92e95bcd761cbed948b24e0c7b.bin
-
Size
263KB
-
Sample
230607-ccc53agd77
-
MD5
07dda2639ae9876148a1d574de721c8c
-
SHA1
5cf7663a00e781d1d8877cc66947085887db6114
-
SHA256
3c0aaffe2ab61aaa449a20fa9946d1ba52efa57a28817cfd803892e2135b2a98
-
SHA512
abeea781dae4b204f3dff55f744f4629932cf18d0d213227a813f9bfe00507fc7789f1f1d5cf6a2f789f6bcd6b911dc4a97266a3481c9161d15122e3ddae9ea4
-
SSDEEP
6144:oj9dhTrOMCRdQaHe12j27+C+2PqHgQ0gQEWe:oj9/T1Ed9HVj27+78qH30gQEF
Behavioral task
behavioral1
Sample
242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
remcos
DON DINERO
moneymaker.dynuddns.net:5050
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-MR2RPQ
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845.exe
-
Size
479KB
-
MD5
56045d92e95bcd761cbed948b24e0c7b
-
SHA1
a58fb81ea1490829f20cd383769f103fd96248bf
-
SHA256
242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845
-
SHA512
2b0943bb4517855bca44dc3e59d5c5e7e97394bc660ff85a857a98f7e1a54e7ca30a4e89d5e7195a92b7451964b8670067dc328217feb11f9edf8391f051c597
-
SSDEEP
6144:k1EwL0xQk9VdeLuVnQs8QLgt8cBvnkCX/3Rde+A+DdsAOZZiXXPcNt2OhX:k1EZT90uNQzYgScBvnn/XpTs/ZiFOhX
Score1/10 -