General
-
Target
5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe.exe
-
Size
483KB
-
Sample
240522-vn28faaa54
-
MD5
228ec528d9ab9357c0ffd2e43bd827cf
-
SHA1
39432be9c2b6cf0844413a71258f0840b89fe6df
-
SHA256
5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe
-
SHA512
8fadef0834df3dfb627e2cb0dcd5de214a90dd1ee38755e9ad988a81d04909d5e29d0646574ea1236e5797cc5053136554d0812aa968c8f32dcc34a1b6a78ac9
-
SSDEEP
6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNsS5Gv:6X7tPMK8ctGe4Dzl4h2QnuPs/ZDwcv
Behavioral task
behavioral1
Sample
5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
remcos
NOTCRYPTING
185.222.57.152:35789
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
true
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_path
%AppData%
-
mouse_option
false
-
mutex
Rmc-GJJQVC
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
- startup_value
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe.exe
-
Size
483KB
-
MD5
228ec528d9ab9357c0ffd2e43bd827cf
-
SHA1
39432be9c2b6cf0844413a71258f0840b89fe6df
-
SHA256
5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe
-
SHA512
8fadef0834df3dfb627e2cb0dcd5de214a90dd1ee38755e9ad988a81d04909d5e29d0646574ea1236e5797cc5053136554d0812aa968c8f32dcc34a1b6a78ac9
-
SSDEEP
6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNsS5Gv:6X7tPMK8ctGe4Dzl4h2QnuPs/ZDwcv
Score1/10 -