General
-
Target
171034128430ac8a6e25fa9e9530a12252b3ffc0a9d6a6d051ee813e431eb568aebbe58939267.dat-decoded.exe
-
Size
483KB
-
Sample
240313-r61ksahe45
-
MD5
11aaf660295ff15db27f1a6c9befbfd4
-
SHA1
0db530e01d3cc0668d9b1113b7aaaa8cf8f00f63
-
SHA256
73c346f861980b8ecaca38c915e2b35a9df94b1054b4d9db8afe4ae609d2eabe
-
SHA512
072d78b97c7cc942ce81022287d6e903c5898708bf70a73da43f74a51997be060d62743b8fee7842d7542249079cb359c0834e9a04c1235dfa47980cd28ce39f
-
SSDEEP
6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNSo5Gv:8X7tPMK8ctGe4Dzl4h2QnuPs/ZsQcv
Behavioral task
behavioral1
Sample
171034128430ac8a6e25fa9e9530a12252b3ffc0a9d6a6d051ee813e431eb568aebbe58939267.dat-decoded.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
171034128430ac8a6e25fa9e9530a12252b3ffc0a9d6a6d051ee813e431eb568aebbe58939267.dat-decoded.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
remcos
Acople
teamadmin.duckdns.org:22041
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
gwinsadmin.exe
-
copy_folder
EuYHkOP
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
install_path
%AppData%
-
keylog_crypt
false
-
keylog_file
regist.dat
-
keylog_flag
false
-
keylog_folder
2240
-
mouse_option
false
-
mutex
-5LSOBH
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Capturas de pantalla
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
171034128430ac8a6e25fa9e9530a12252b3ffc0a9d6a6d051ee813e431eb568aebbe58939267.dat-decoded.exe
-
Size
483KB
-
MD5
11aaf660295ff15db27f1a6c9befbfd4
-
SHA1
0db530e01d3cc0668d9b1113b7aaaa8cf8f00f63
-
SHA256
73c346f861980b8ecaca38c915e2b35a9df94b1054b4d9db8afe4ae609d2eabe
-
SHA512
072d78b97c7cc942ce81022287d6e903c5898708bf70a73da43f74a51997be060d62743b8fee7842d7542249079cb359c0834e9a04c1235dfa47980cd28ce39f
-
SSDEEP
6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNSo5Gv:8X7tPMK8ctGe4Dzl4h2QnuPs/ZsQcv
Score1/10 -