General
-
Target
5f8edf465a52b81e0c048dc42f4b975bdf7a3e8a77e1677b52793422b12e7d90.exe
-
Size
483KB
-
Sample
240523-rsljpsec3z
-
MD5
59efc1091f942da11955f59541eb8362
-
SHA1
849d9ffefa30dc439809c4bdf1c1440159d39fe4
-
SHA256
5f8edf465a52b81e0c048dc42f4b975bdf7a3e8a77e1677b52793422b12e7d90
-
SHA512
e988c07b70bd14e68872db122c5743f530f88085587a261d188a905848bb2b51b15f52c8c02b4592233af3c5dd7461515bc7b5e78bba172c8a15ef5d0a84ceee
-
SSDEEP
6144:2XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNX5Gv:2X7tPMK8ctGe4Dzl4h2QnuPs/ZDGcv
Behavioral task
behavioral1
Sample
5f8edf465a52b81e0c048dc42f4b975bdf7a3e8a77e1677b52793422b12e7d90.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5f8edf465a52b81e0c048dc42f4b975bdf7a3e8a77e1677b52793422b12e7d90.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
remcos
New
hoacanhceramic.com:14782
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-4X155W
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
5f8edf465a52b81e0c048dc42f4b975bdf7a3e8a77e1677b52793422b12e7d90.exe
-
Size
483KB
-
MD5
59efc1091f942da11955f59541eb8362
-
SHA1
849d9ffefa30dc439809c4bdf1c1440159d39fe4
-
SHA256
5f8edf465a52b81e0c048dc42f4b975bdf7a3e8a77e1677b52793422b12e7d90
-
SHA512
e988c07b70bd14e68872db122c5743f530f88085587a261d188a905848bb2b51b15f52c8c02b4592233af3c5dd7461515bc7b5e78bba172c8a15ef5d0a84ceee
-
SSDEEP
6144:2XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNX5Gv:2X7tPMK8ctGe4Dzl4h2QnuPs/ZDGcv
Score1/10 -