Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1708413251...87.exe

windows7-x64

9

1708413251...87.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1708413251d23e9fb0d0421ac0460c99acd3bef8282a7666739c726cd69a390a9b719b01eb687.dat-decoded

  • Size

    483KB

  • MD5

    7872343cd441599fa538258dfa3f2837

  • SHA1

    be62f1cc1ac1fa4bc3bb2a76f40441e33d1360bf

  • SHA256

    4d930d5cf4b976a2f3412e3bb542c426fd76df8f3e261d4d68799ee199513791

  • SHA512

    9c1f00900794a00115287812988708de3b7e70f254f7e4a768e2df783170f5e2c8d0da4a0c4fa9fdb1332930a3bcac0eb0350029a7d7544a30b2afcfc22dd655

  • SSDEEP

    6144:cXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNq5Gv:cX7tPMK8ctGe4Dzl4h2QnuPs/ZsTcv

Score
10/10
remotehostremcos

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

C2

mohmusremcos.duckdns.org:14645

Attributes
  • audio_folder

    MicRecords

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-J0H6V3

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Signatures

  • Remcos family
    remcos
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1708413251d23e9fb0d0421ac0460c99acd3bef8282a7666739c726cd69a390a9b719b01eb687.dat-decoded
    .exe windows:5 windows x86 arch:x86

    8d5087ff5de35c3fbb9f212b47d63cad


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.