General

  • Target

    server.zip

  • Size

    3.2MB

  • MD5

    8efbc056057b3caf7581d54bd0d6e1a8

  • SHA1

    6a916b9759cac999cac0479e5052c7f26460f8bf

  • SHA256

    ff0e085b4a7bbc9af91200544c44acb456aee1bf4486c216ea7bd7d9dc568565

  • SHA512

    aefaf3c3a80009574f51099b3b08d9bbc0f795f9f3338d9c44c57263e450bd7370be35f3b7ec504047a2ebf111369ced09d30f92ccc7ce01aee87e6ae3e6a710

  • SSDEEP

    49152:TWCa6IXFs+DTvbeI9vqDFNSRamXmT5osG598/POM7uhGK5L7UxzELYHAoY7xLVsu:pqX72zcRamXmT53G5AOQKm4YgXv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • server.zip
    .zip
  • server/RemcosServer.exe
    .exe windows:6 windows x64 arch:x64

    d9d5175c5951b2f5e681f77634514a7c


    Headers

    Imports

    Sections

  • server/libcrypto-3-x64.dll
    .dll windows:5 windows x64 arch:x64

    afa8a10163b2aa7831ee0e91bbe7d929


    Headers

    Imports

    Exports

    Sections

  • server/libssl-3-x64.dll
    .dll windows:5 windows x64 arch:x64

    a5db4944ca4c6446f5fbd8bbdc2b1577


    Headers

    Imports

    Exports

    Sections

  • server/server.crt
  • server/server.key