General
-
Target
1711024329aca6f153db96fc24c70e4e85443eb3bad4cf39e76646fe9676da758cc2db84ff260.dat-decoded
-
Size
483KB
-
Sample
240321-prennabe67
-
MD5
4ab8a12f4c00708195777aa119cb870b
-
SHA1
b2429263f47742d2fc5f97e34c388cebb694b05b
-
SHA256
fddb60982487f3a2e83e289ad4ef1f8db40063fd0030b813d1b96c2967b756b2
-
SHA512
d86afbbe9077da20a139312f8cc71921aa37160d4e43eaf8237d617a7c8a03cd5ee0ba3dfc69c738f6f84dacc26b883ddbac2a718f049df77f4059951043e7ce
-
SSDEEP
6144:aXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNs5Gv:aX7tPMK8ctGe4Dzl4h2QnuPs/ZDBcv
Behavioral task
behavioral1
Sample
1711024329aca6f153db96fc24c70e4e85443eb3bad4cf39e76646fe9676da758cc2db84ff260.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1711024329aca6f153db96fc24c70e4e85443eb3bad4cf39e76646fe9676da758cc2db84ff260.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
remcos
RemoteHost
newerra.duckdns.org:2445
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-QDIYCC
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
1711024329aca6f153db96fc24c70e4e85443eb3bad4cf39e76646fe9676da758cc2db84ff260.dat-decoded
-
Size
483KB
-
MD5
4ab8a12f4c00708195777aa119cb870b
-
SHA1
b2429263f47742d2fc5f97e34c388cebb694b05b
-
SHA256
fddb60982487f3a2e83e289ad4ef1f8db40063fd0030b813d1b96c2967b756b2
-
SHA512
d86afbbe9077da20a139312f8cc71921aa37160d4e43eaf8237d617a7c8a03cd5ee0ba3dfc69c738f6f84dacc26b883ddbac2a718f049df77f4059951043e7ce
-
SSDEEP
6144:aXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNs5Gv:aX7tPMK8ctGe4Dzl4h2QnuPs/ZDBcv
Score1/10 -