General
-
Target
x6lYwBfoAxDR.exe
-
Size
483KB
-
Sample
240325-s9k5yacc22
-
MD5
6f76fb672d1db1c3dbe4770981c7fec3
-
SHA1
3d208d34c71f1108a53b5604615db4d71ddb5002
-
SHA256
c04f7cfb13eff22b612e0809dd48b2c3ad4e6ab8ea30d0d91fd077194eb52cfa
-
SHA512
7a459f1554a878da46ec57ff3788881efbb39ed9dc5a87ecb6692f0d2a73941acdd11579eea8a9b9626436c59947a9901b087baf73a278bc2dab6cb4bbe694a1
-
SSDEEP
6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNt5Gv:8X7tPMK8ctGe4Dzl4h2QnuPs/Zskcv
Behavioral task
behavioral1
Sample
x6lYwBfoAxDR.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
x6lYwBfoAxDR.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
remcos
w7
jgm.kozow.com:5532
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
real-M7UEG4
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
x6lYwBfoAxDR.exe
-
Size
483KB
-
MD5
6f76fb672d1db1c3dbe4770981c7fec3
-
SHA1
3d208d34c71f1108a53b5604615db4d71ddb5002
-
SHA256
c04f7cfb13eff22b612e0809dd48b2c3ad4e6ab8ea30d0d91fd077194eb52cfa
-
SHA512
7a459f1554a878da46ec57ff3788881efbb39ed9dc5a87ecb6692f0d2a73941acdd11579eea8a9b9626436c59947a9901b087baf73a278bc2dab6cb4bbe694a1
-
SSDEEP
6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNt5Gv:8X7tPMK8ctGe4Dzl4h2QnuPs/Zskcv
Score1/10 -