General
-
Target
2484-27-0x0000000000400000-0x0000000000482000-memory.dmp
-
Size
520KB
-
Sample
240415-mg9d6sef2x
-
MD5
932c38adaab7d927d6a9417d4325b04a
-
SHA1
1de5315059e55fd5b73bc26d49d573273243318f
-
SHA256
3daac0a09d6dcd67362d712aa63c80e17c2abfd06fab95fae79b2a4a12651780
-
SHA512
2cffb9c5f7335115df245434f456699e16c4e06c988eadc1b0e90d49b0b7cd401431c109a78fefa7b7d9d54a4e0d5002a3351113895efb73a7f643dcfe2aca6c
-
SSDEEP
6144:2XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcN:2X7tPMK8ctGe4Dzl4h2QnuPs/ZD
Behavioral task
behavioral1
Sample
2484-27-0x0000000000400000-0x0000000000482000-memory.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2484-27-0x0000000000400000-0x0000000000482000-memory.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
remcos
Host
fnbabsa.net:3366
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-0MSACQ
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
2484-27-0x0000000000400000-0x0000000000482000-memory.dmp
-
Size
520KB
-
MD5
932c38adaab7d927d6a9417d4325b04a
-
SHA1
1de5315059e55fd5b73bc26d49d573273243318f
-
SHA256
3daac0a09d6dcd67362d712aa63c80e17c2abfd06fab95fae79b2a4a12651780
-
SHA512
2cffb9c5f7335115df245434f456699e16c4e06c988eadc1b0e90d49b0b7cd401431c109a78fefa7b7d9d54a4e0d5002a3351113895efb73a7f643dcfe2aca6c
-
SSDEEP
6144:2XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcN:2X7tPMK8ctGe4Dzl4h2QnuPs/ZD
Score1/10 -