General
-
Target
3a9fb5399a485d6e94d5ffe6e2349e74.bin
-
Size
265KB
-
Sample
240418-bgxvlafh5s
-
MD5
11c75421faa39ae2520f07b32d0463e7
-
SHA1
020a2716426a4c6b4f960d4ab336282465bee31a
-
SHA256
1866a197795c790a3cf09d937703f0a20afbdba389a2a2d81fbc8b92bf4e6938
-
SHA512
a9cf54d6cf130bbec69afd98a5a968be77601b96245583034b34ca02f0973efab06bc7864b6632da5baadce842e0fb75b273625badc7d45fa482cf5c4e8b7db3
-
SSDEEP
6144:lVjWawTqTza4T7aMCp5h0MuDrtcjbX+Igj1iEZxeeM:6awTEza4qMC/g6Y1BZ0p
Malware Config
Extracted
remcos
RemoteHost
ezege.duckdns.org:14645
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-IVESQI
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
1984264959b7d63e516544cbce4b6dffb7ed5210a472437dd88068f4d39600e2.exe
-
Size
483KB
-
MD5
3a9fb5399a485d6e94d5ffe6e2349e74
-
SHA1
9f5438e7296fe2ca8f7efb574e7139923756ceb8
-
SHA256
1984264959b7d63e516544cbce4b6dffb7ed5210a472437dd88068f4d39600e2
-
SHA512
955363ff31b0d5225a90452f1e9d676a4c81a21380289381f96206854914fd0a125ffb434b598a28c9d75a210ac2d793e06757e065f4d1d99447d6284ccd712e
-
SSDEEP
6144:mXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNra5Gv:mX7tPMK8ctGe4Dzl4h2QnuPs/ZDncv
Score1/10 -