General
-
Target
2d5a59b0f8c75fbcf531214677d0e79b75e15b02f02386888c0c1864739c837c
-
Size
259KB
-
Sample
240417-q1rj9abg21
-
MD5
a61ba382ae3ce5a36401d9eee5cbbaaf
-
SHA1
63e9af6a6ba790f95753ce5a13a99690d795c179
-
SHA256
2d5a59b0f8c75fbcf531214677d0e79b75e15b02f02386888c0c1864739c837c
-
SHA512
683882c9a90e670b42d79639269302f6d7e5a9cf80b9972b93e4e1aa851fe96c8a23da54312341cbc86c149e5312576ba3d4ccaea9e00d71de142c0cac2982c0
-
SSDEEP
6144:QrUicteXNwVCPivmSkeHr7jM1t3uA//M1AvH:QrUt7CPemHevjxSP
Malware Config
Extracted
remcos
884764
serverupdatemarch353.duckdns.org:5987
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
77364-XW3CG1
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
startup_value
Remcos
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
9bcacc9d076f50eb4e78d05d5a9910cd9be476dd6c2a50f5419f60079dbb1bb4.exe
-
Size
469KB
-
MD5
3049c48983d277bf2acbbbecabda9f83
-
SHA1
2a6fba63574a449037036287e98f35ce33b174c5
-
SHA256
9bcacc9d076f50eb4e78d05d5a9910cd9be476dd6c2a50f5419f60079dbb1bb4
-
SHA512
14e6805986fa6dcdfe62d3e618a3b58d539bf73ef0c46d01a601b1c00512ba4e25c0ebbcb05308f7698b3761755efced7923fedebc680fc07671016091f00b2a
-
SSDEEP
12288:Wmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSDn9:uiLJbpI7I2WhQqZ7D9
Score1/10 -