Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29-03-2024 22:46
General
-
Target
remcos_agent.exe
-
Size
84KB
-
MD5
5fdbc785924aa0b03021ea122e1c31ba
-
SHA1
5956170fc37b9e20b52813f190f52ca444cbdcb6
-
SHA256
d77a6dbe3410c7e968b9403d5186cb7836c23340672a6428996ab873652fecbb
-
SHA512
b13d4642847518caee2a496249c5038de317b4d6c09696d33b544bdac71e70e06f0f6045895e578fdcbfed22c177b2acca5103ea53f8825afee1ea4a078f3da9
-
SSDEEP
1536:apNEsaeiQl8TIqytzRJl+uiNuI7FFCPBsZcOzq1T35T/6LeILtVo8V:apNEaiQl2qouiNdFFCiZcOz+TJ/AeAt
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\remcos_agent.exe"C:\Users\Admin\AppData\Local\Temp\remcos_agent.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage