Analysis
- max time kernel
148s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
29/03/2024, 22:46
Behavioral task
behavioral1
Sample
remcos_agent.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
remcos_agent.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
- Target remcos_agent.exe
- Size 84KB
- Sample240329-2qba3abe9t
- SHA256 d77a6dbe3410c7e968b9403d5186cb7836c23340672a6428996ab873652fecbb
- MD5 5fdbc785924aa0b03021ea122e1c31ba
- SHA1 5956170fc37b9e20b52813f190f52ca444cbdcb6
- SHA512 b13d4642847518caee2a496249c5038de317b4d6c09696d33b544bdac71e70e06f0f6045895e578fdcbfed22c177b2acca5103ea53f8825afee1ea4a078f3da9
- SSDEEP 1536:apNEsaeiQl8TIqytzRJl+uiNuI7FFCPBsZcOzq1T35T/6LeILtVo8V:apNEaiQl2qouiNdFFCiZcOz+TJ/AeAt
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3048 remcos_agent.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3048 remcos_agent.exe