General
-
Target
5aef1b0e1673044cc7a46a3ea02e4caf2ec853acdf50e3d9a72aa9ac0fb1f88f.exe
-
Size
483KB
-
Sample
240715-v5n25s1frj
-
MD5
472052db7a344b5dba08aec26d6bdf6f
-
SHA1
72d44235387e2ce08665b8976424e802a672c65f
-
SHA256
5aef1b0e1673044cc7a46a3ea02e4caf2ec853acdf50e3d9a72aa9ac0fb1f88f
-
SHA512
75540583eb969e3706bb751b69c7760199b748602cea7c8a7b905e822999c3dd60647ee7f6f0e2cd7b08728e100577a51aaf70188a938005290e314705670a57
-
SSDEEP
6144:QXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZoAX0cNa5Gv:QX7tPMK8ctGe4Dzl4h2QnuPs/Zofcv
Behavioral task
behavioral1
Sample
5aef1b0e1673044cc7a46a3ea02e4caf2ec853acdf50e3d9a72aa9ac0fb1f88f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5aef1b0e1673044cc7a46a3ea02e4caf2ec853acdf50e3d9a72aa9ac0fb1f88f.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
remcos
spacolombia2707RAPTOR
areaseguras.con-ip.com:2707
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
loggsdSSC
-
keylog_path
%AppData%
-
mouse_option
false
-
mutex
Rmc121455011-7TOVMS
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
- startup_value
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
5aef1b0e1673044cc7a46a3ea02e4caf2ec853acdf50e3d9a72aa9ac0fb1f88f.exe
-
Size
483KB
-
MD5
472052db7a344b5dba08aec26d6bdf6f
-
SHA1
72d44235387e2ce08665b8976424e802a672c65f
-
SHA256
5aef1b0e1673044cc7a46a3ea02e4caf2ec853acdf50e3d9a72aa9ac0fb1f88f
-
SHA512
75540583eb969e3706bb751b69c7760199b748602cea7c8a7b905e822999c3dd60647ee7f6f0e2cd7b08728e100577a51aaf70188a938005290e314705670a57
-
SSDEEP
6144:QXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZoAX0cNa5Gv:QX7tPMK8ctGe4Dzl4h2QnuPs/Zofcv
Score1/10 -