General
-
Target
5048-948-0x0000000000400000-0x0000000000482000-memory.dmp
-
Size
520KB
-
Sample
240126-rb6tbafcf4
-
MD5
dace8ff00a6471f239a9f13d2da3cafe
-
SHA1
27fa3b347b29a3950f143a510e08e772e45d1d89
-
SHA256
a44668219bd693a82ec3c177407b21df1a88fca966a014cf3b4d9f3f2bb66a0b
-
SHA512
8ed8d8e8f5ee6ab80c7712044548c4e1c661332bf7682d12942663b2d313f682b8eb7ed79146276298caad3296e94d43cab7b9801fe25ee3aa16f88779f75f2d
-
SSDEEP
6144:gXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHYsAOZZsAX4cs05Gv:gX7tPMK8ctGe4Dzl4h2QnuOs/ZsScv
Behavioral task
behavioral1
Sample
5048-948-0x0000000000400000-0x0000000000482000-memory.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5048-948-0x0000000000400000-0x0000000000482000-memory.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
remcos
24
162.218.122.24:5707
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-A49MY7
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
5048-948-0x0000000000400000-0x0000000000482000-memory.dmp
-
Size
520KB
-
MD5
dace8ff00a6471f239a9f13d2da3cafe
-
SHA1
27fa3b347b29a3950f143a510e08e772e45d1d89
-
SHA256
a44668219bd693a82ec3c177407b21df1a88fca966a014cf3b4d9f3f2bb66a0b
-
SHA512
8ed8d8e8f5ee6ab80c7712044548c4e1c661332bf7682d12942663b2d313f682b8eb7ed79146276298caad3296e94d43cab7b9801fe25ee3aa16f88779f75f2d
-
SSDEEP
6144:gXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHYsAOZZsAX4cs05Gv:gX7tPMK8ctGe4Dzl4h2QnuOs/ZsScv
Score1/10 -