General
-
Target
57d0941023ca39fc30e9ed26ebd3183b5364cf2ab1914842bff175cf5f13e279.exe
-
Size
482KB
-
Sample
240430-brqt2agf5x
-
MD5
7e5c3ab329179899f25c55f6d76a19a8
-
SHA1
991ebb4a8ec69139014336c28a9d4d77ea7ab914
-
SHA256
57d0941023ca39fc30e9ed26ebd3183b5364cf2ab1914842bff175cf5f13e279
-
SHA512
55fa72194139ce8871925776ab013d484c562c3e0ebcce9564e9f6f373cb7b34a7693503f937a5e1af659895b6b302f73053de05244fb1192f12dc5de8e83563
-
SSDEEP
6144:SXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNw5Gv:SX7tPMK8ctGe4Dzl4h2QnuPs/Zspcv
Behavioral task
behavioral1
Sample
57d0941023ca39fc30e9ed26ebd3183b5364cf2ab1914842bff175cf5f13e279.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
57d0941023ca39fc30e9ed26ebd3183b5364cf2ab1914842bff175cf5f13e279.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
remcos
nj tiago
sendfiletiahforem.duckdns.org:8889
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
Disk.dat
-
keylog_flag
false
-
keylog_folder
Disk
-
mouse_option
false
-
mutex
Rmc-OTRXI7
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Capturas de pantalla
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
57d0941023ca39fc30e9ed26ebd3183b5364cf2ab1914842bff175cf5f13e279.exe
-
Size
482KB
-
MD5
7e5c3ab329179899f25c55f6d76a19a8
-
SHA1
991ebb4a8ec69139014336c28a9d4d77ea7ab914
-
SHA256
57d0941023ca39fc30e9ed26ebd3183b5364cf2ab1914842bff175cf5f13e279
-
SHA512
55fa72194139ce8871925776ab013d484c562c3e0ebcce9564e9f6f373cb7b34a7693503f937a5e1af659895b6b302f73053de05244fb1192f12dc5de8e83563
-
SSDEEP
6144:SXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNw5Gv:SX7tPMK8ctGe4Dzl4h2QnuPs/Zspcv
Score1/10 -