General
-
Target
instForCrypt.exe
-
Size
3.9MB
-
Sample
231128-qejbraaa65
-
MD5
a5abe4d6a6b404a3acad92cfbe9a30e2
-
SHA1
f636dab6c1df1799f5274df2a488a5579047bc0b
-
SHA256
5a5f5bd0f438a7f09abda738e770004da8106c5772af8889587a6fa7f15ab9aa
-
SHA512
920a2d90f8d0f59833547ea63d39fc1e780531d2203354f09f0947949d37bc3de4a34b57dea20297f6c3a9defc12dfb2a022d3c3f479db2abfb1041d59ff07a3
-
SSDEEP
98304:RlZJ4XQ4FL8VdL0hvADfHrafk0kJIKUjhq:fp4yVdDfLaBbc
Behavioral task
behavioral1
Sample
instForCrypt.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
instForCrypt.exe
Resource
win10v2004-20231127-en
Malware Config
Extracted
remcos
Crypted
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
true
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
esotss.dat
-
keylog_flag
false
-
keylog_path
%AppData%
-
mouse_option
false
-
mutex
wsaortist-MIF9KD
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
- startup_value
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
instForCrypt.exe
-
Size
3.9MB
-
MD5
a5abe4d6a6b404a3acad92cfbe9a30e2
-
SHA1
f636dab6c1df1799f5274df2a488a5579047bc0b
-
SHA256
5a5f5bd0f438a7f09abda738e770004da8106c5772af8889587a6fa7f15ab9aa
-
SHA512
920a2d90f8d0f59833547ea63d39fc1e780531d2203354f09f0947949d37bc3de4a34b57dea20297f6c3a9defc12dfb2a022d3c3f479db2abfb1041d59ff07a3
-
SSDEEP
98304:RlZJ4XQ4FL8VdL0hvADfHrafk0kJIKUjhq:fp4yVdDfLaBbc
Score1/10 -