General
-
Target
1180-959-0x0000000000400000-0x0000000000482000-memory.dmp
-
Size
520KB
-
Sample
240124-f3znjabfbq
-
MD5
8a86dedc5584357309b1d81e67f073f1
-
SHA1
d81665bae4eeedd79dc12dbcaf0b1908dab09931
-
SHA256
67d60548da913ddf266212b0f855691028d6788f65dfdb5dae54c438b20e39a2
-
SHA512
cbe079f233082b6cf1f9fd818d226c73ab358e5bc2268705a390cf5476bc73fe6e7732a5e36f0ad4e12a1a9973e87bc47969e869ce024c0bb1bbd2d7b294c8c2
-
SSDEEP
6144:gXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHaGgsAOZZsAX4cjU5Gv:gX7tPMK8ctGe4Dzl4h2Qnungs/Zsrcv
Behavioral task
behavioral1
Sample
1180-959-0x0000000000400000-0x0000000000482000-memory.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1180-959-0x0000000000400000-0x0000000000482000-memory.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
remcos
24
162.218.122.24:5707
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-A49MY7
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
1180-959-0x0000000000400000-0x0000000000482000-memory.dmp
-
Size
520KB
-
MD5
8a86dedc5584357309b1d81e67f073f1
-
SHA1
d81665bae4eeedd79dc12dbcaf0b1908dab09931
-
SHA256
67d60548da913ddf266212b0f855691028d6788f65dfdb5dae54c438b20e39a2
-
SHA512
cbe079f233082b6cf1f9fd818d226c73ab358e5bc2268705a390cf5476bc73fe6e7732a5e36f0ad4e12a1a9973e87bc47969e869ce024c0bb1bbd2d7b294c8c2
-
SSDEEP
6144:gXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHaGgsAOZZsAX4cjU5Gv:gX7tPMK8ctGe4Dzl4h2Qnungs/Zsrcv
Score1/10 -