General
-
Target
5f5d2343ef77c04e8f323931683cef514d6458c946ec62a8fa35e4561c7b7abd
-
Size
267KB
-
Sample
240417-sacdrada97
-
MD5
65e9d41a462b9233183c021e3797ed7d
-
SHA1
eb06f7a680c4c6c047c6754d43c7c2299104c81a
-
SHA256
5f5d2343ef77c04e8f323931683cef514d6458c946ec62a8fa35e4561c7b7abd
-
SHA512
6a3ee1e76d275062268169fc79fd7b51975766b54ad8b68ad87fb4c63b827f797b3de434a0dbbce8a2f7606c29c66c22743e2a6408079dd92e1306daaea11cee
-
SSDEEP
6144:4vxH49DgCrn3UheSdcqOL3FfyzgvR3Mo23zSoMIEQHjsSE:KhGEhRCdD5co23oIvAz
Behavioral task
behavioral1
Sample
88f0722c907100ef09049c82032a0ac66afa153d03fb89d378ae65f6e5890a3f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
88f0722c907100ef09049c82032a0ac66afa153d03fb89d378ae65f6e5890a3f.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
remcos
RemoteHost
194.87.31.229:6438
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-D6LMC9
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
88f0722c907100ef09049c82032a0ac66afa153d03fb89d378ae65f6e5890a3f.exe
-
Size
486KB
-
MD5
b1f8484ee01a7730938210ea6e851888
-
SHA1
4ab9c910cfc9690b7f54eba83e30bc1fe6984297
-
SHA256
88f0722c907100ef09049c82032a0ac66afa153d03fb89d378ae65f6e5890a3f
-
SHA512
e931df75925c32ccb2ccb478d002433f188c78ce87084dba5b9575d4ddd2b8a9e4e8624f51d6fd33fae0734460706c1d3f71bdcfa38367d96505d56b294924d6
-
SSDEEP
6144:G/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZ6AXAc7u7ov7b:G/uPq3AfK496Gw0lwGXN3pvs/Z6x8v7b
Score1/10 -