General
-
Target
86b4d9c62ca9eccd9341136d5d4831548ccb79ed000f29e8a8cc0afcbe639c90.exe
-
Size
483KB
-
Sample
231127-larp4sfe7w
-
MD5
2b5d74fce2b3b6b01ce937447636ed11
-
SHA1
37361dbd70c49a65f3090073b33c5c9519aa60e0
-
SHA256
86b4d9c62ca9eccd9341136d5d4831548ccb79ed000f29e8a8cc0afcbe639c90
-
SHA512
436605dd9aceb9ce476efc826ecdab295b931fe1acceda509a152e5f3fd6042e5802702ab9ee1b4a4753c16cc552ae1c402436f5fcc2d9504ba15d9d19d1637e
-
SSDEEP
6144:AXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNR5Gv:AX7tPMK8ctGe4Dzl4h2QnuPs/Zs0cv
Behavioral task
behavioral1
Sample
86b4d9c62ca9eccd9341136d5d4831548ccb79ed000f29e8a8cc0afcbe639c90.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
86b4d9c62ca9eccd9341136d5d4831548ccb79ed000f29e8a8cc0afcbe639c90.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
remcos
Crypted
172.174.245.21:5400
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
true
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
noer.dat
-
keylog_flag
false
-
keylog_path
%UserProfile%
-
mouse_option
false
-
mutex
rousasi-RW3F58
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
- startup_value
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
86b4d9c62ca9eccd9341136d5d4831548ccb79ed000f29e8a8cc0afcbe639c90.exe
-
Size
483KB
-
MD5
2b5d74fce2b3b6b01ce937447636ed11
-
SHA1
37361dbd70c49a65f3090073b33c5c9519aa60e0
-
SHA256
86b4d9c62ca9eccd9341136d5d4831548ccb79ed000f29e8a8cc0afcbe639c90
-
SHA512
436605dd9aceb9ce476efc826ecdab295b931fe1acceda509a152e5f3fd6042e5802702ab9ee1b4a4753c16cc552ae1c402436f5fcc2d9504ba15d9d19d1637e
-
SSDEEP
6144:AXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNR5Gv:AX7tPMK8ctGe4Dzl4h2QnuPs/Zs0cv
Score1/10 -