General
-
Target
5b6eb9b35894b607f65989693625887e.bin
-
Size
262KB
-
Sample
230607-ccmdqsgd84
-
MD5
eb6a9f94f59f7938452e25a9e61461f8
-
SHA1
32c51f17ba54a70eabca874b9e2d9f4fc5d75af0
-
SHA256
974a2e9c0b272ad9be10cc81f2189d83cfc39894945f50b25724337ca8d5c2fe
-
SHA512
aa4bc24ca3ae9cde94111ac7870e1f6128fee24e1f798d5d28566204194bfdd1b3bb71e23941d4b1068ab97ca4c59d35a01c5264ca28d10762276f855222662c
-
SSDEEP
6144:/65EZX/EJ/YRCQEg4SPM0l6csaSvX4UQr5GF1:/oEZXk/6/lkLQr561
Behavioral task
behavioral1
Sample
4424663695e9749f70cf73c587c910202344b18aa86144ca748aede28239a13f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4424663695e9749f70cf73c587c910202344b18aa86144ca748aede28239a13f.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
remcos
RD ASEGU
newsestrenos1.duckdns.org:2021
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-B0Z5XX
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
4424663695e9749f70cf73c587c910202344b18aa86144ca748aede28239a13f.exe
-
Size
478KB
-
MD5
5b6eb9b35894b607f65989693625887e
-
SHA1
89a59cbe0e6c6f2e84d683467f6d445a51ecaca8
-
SHA256
4424663695e9749f70cf73c587c910202344b18aa86144ca748aede28239a13f
-
SHA512
a85c17cf00e3f16f02290916318c2ce488a0c9d6c6283c0981aad120e3f9fa84a6a70bed57b10de46477959fcbe7fba4a8fcd9c6b6fc8ecee033acf8ca7706da
-
SSDEEP
6144:y1EwL0xQk9VdeLuVnQs8QLgt8cBvnkCX/3Rde+A+DdsAOZZiXXPcNs2OhX:y1EZT90uNQzYgScBvnn/XpTs/ZiEOhX
Score1/10 -