General
-
Target
c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe
-
Size
483KB
-
Sample
240520-blr5xadb4x
-
MD5
652a00ef353b96cb34fde8d5efc47cce
-
SHA1
dd1f435551267542e945f2e1b5bc592ce90535e4
-
SHA256
c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44
-
SHA512
cb89354a85b4982e6894a1dec387e3ba3f357b9abed44aadafaa8c1efcaf1aa44484acf527ee7a10c6c8b34d1ac6f4b62b36be5658bda6bb635e7ada1494c0e7
-
SSDEEP
6144:mXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNc5Gv:mX7tPMK8ctGe4Dzl4h2QnuPs/ZD1cv
Behavioral task
behavioral1
Sample
c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
remcos
RemoteHost
alibabaforwader10.ddns.net:60247
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-AC7NKA
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe
-
Size
483KB
-
MD5
652a00ef353b96cb34fde8d5efc47cce
-
SHA1
dd1f435551267542e945f2e1b5bc592ce90535e4
-
SHA256
c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44
-
SHA512
cb89354a85b4982e6894a1dec387e3ba3f357b9abed44aadafaa8c1efcaf1aa44484acf527ee7a10c6c8b34d1ac6f4b62b36be5658bda6bb635e7ada1494c0e7
-
SSDEEP
6144:mXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNc5Gv:mX7tPMK8ctGe4Dzl4h2QnuPs/ZD1cv
Score1/10 -