Resubmissions

27/06/2024, 10:16

240627-marwjswckd 10

25/06/2024, 09:37

240625-llj5eaveqk 10

General

  • Target

    pass 777 REMCOS v1.7 Professional.7z

  • Size

    12.0MB

  • MD5

    693b32731934f4f42946e5e1be1efd0f

  • SHA1

    44e5a39f928e8119debb3763fbaa9200862e961e

  • SHA256

    5816ffad0307e947580e8b61bc3b7a3feedd945f00b7ccfae56ba8564832c57a

  • SHA512

    a797fbb5b6114cf9d303ec63bac0a4576934fa50d874331a2091c7d306d3f77f8b2af3412ef76121133b83b0623f106ed46cd56cb597c991b6ca26c822c3c9cb

  • SSDEEP

    196608:L9tYskxWGqOHlFLE8Ef+fBFIT7As2qgrQiWyLWaVwOUZzDFfCnwUapgqnwrk0:ptYs0WGqO/Q8dfBFSkzTUiWyxmZv1gaY

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • pass 777 REMCOS v1.7 Professional.7z
    .7z

    Password: 777

  • REMCOS v1.7 Professional/REMCOSAuthHooks.dll
    .dll windows:5 windows x86 arch:x86

    Password: 777

    d452660aa6c160f2a66e1e195c1fec6c


    Headers

    Imports

    Sections

  • REMCOS v1.7 Professional/Remcos Loader.exe
    .exe windows:5 windows x86 arch:x86

    Password: 777

    28751844dec40b40bddaf2626843d3ee


    Headers

    Imports

    Exports

    Sections

  • REMCOS v1.7 Professional/desktop.ini
  • REMCOS v1.7 Professional/remcos.exe
    .exe windows:5 windows x86 arch:x86

    Password: 777

    e2c065b1c331512012c564526756d6f2


    Headers

    Imports

    Exports

    Sections