General
-
Target
remcos_a D JAM.exe
-
Size
483KB
-
Sample
240405-w1t82aah9t
-
MD5
e6b7c26e0e647f45ffa4eaaa14edf5fb
-
SHA1
56a89c676780e4ad1065dded818261428f8627ad
-
SHA256
3802777efd14c1d2a5358277a30bfbac7aff9c1d308faba80cf81fe55c321b30
-
SHA512
f4bdb23d793845928831776227147e9d7eda7213f99ec5d4d67f0f9fbe391b8fe7878c41d8485ebfdd8d6038c4126ed3bea55f7ea089e1faaa4b6a75c476c69e
-
SSDEEP
6144:aXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNg5Gv:aX7tPMK8ctGe4Dzl4h2QnuPs/ZD5cv
Behavioral task
behavioral1
Sample
remcos_a D JAM.exe
Resource
win11-20240221-en
Malware Config
Extracted
remcos
RemoteHost
193.142.146.21:2404
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-FUSPD3
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
remcos_a D JAM.exe
-
Size
483KB
-
MD5
e6b7c26e0e647f45ffa4eaaa14edf5fb
-
SHA1
56a89c676780e4ad1065dded818261428f8627ad
-
SHA256
3802777efd14c1d2a5358277a30bfbac7aff9c1d308faba80cf81fe55c321b30
-
SHA512
f4bdb23d793845928831776227147e9d7eda7213f99ec5d4d67f0f9fbe391b8fe7878c41d8485ebfdd8d6038c4126ed3bea55f7ea089e1faaa4b6a75c476c69e
-
SSDEEP
6144:aXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNg5Gv:aX7tPMK8ctGe4Dzl4h2QnuPs/ZD5cv
Score1/10 -