General

  • Target

    remcos_a.exe

  • Size

    211KB

  • MD5

    95e79c7acde11edbc825756d268bcaeb

  • SHA1

    a8c0ebcee2c58299e31ad9805ce5da1bf6decfe7

  • SHA256

    50fd9f297bcf8bbd407d2d91b7b2705090438a49fc8dc8d2eecdfe5320511072

  • SHA512

    096ceb7bde5c6954262fae21213f5ce6747e524f32548343747c19fc474fa08b9f5d0a0d8c337dcc62a13ec578c3ba753a3e07959c1af9caadf752f770865793

  • SSDEEP

    3072:ASnzw5FmY9/qcFO3IjfDFHhLPwyYwyRh9yCfY/EhDLxDNO575vAZQWvvRv5HxwIG:LQ9ScNbpdY7Rh07/EhxDNOMZLRB

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • remcos_a.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections