General
-
Target
2024-07-23_85f2d3a95f96296376e690b0d3ccf07f_magniber
-
Size
6.3MB
-
Sample
240723-kqcepaxdjf
-
MD5
85f2d3a95f96296376e690b0d3ccf07f
-
SHA1
6a6ef47407fb5836b977997937bc9be21c27b6ac
-
SHA256
304c9441dda8c71ef1f999ce24316919a5a74f9352ce6f54ac473c6f1e48107c
-
SHA512
770c26540cb26ce01c6a6e569342afb0f4f5f9dd554a8475e068378a19cebf9a52e2a50824a1ddd6ca2193d91c99a71050ff3fba137d0c2625c803b84395cf3f
-
SSDEEP
196608:EF+3g0IQHdPtjOLokUebxVGqQG/xhkZ0sJ:LKQ9PtjSs/GnkZ0s
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-23_85f2d3a95f96296376e690b0d3ccf07f_magniber.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-07-23_85f2d3a95f96296376e690b0d3ccf07f_magniber.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
remcos
1&==DE JULIO==2024
oijdwe820b397gdb3n298rd2.con-ip.com:5023
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-6XZCAN
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
2024-07-23_85f2d3a95f96296376e690b0d3ccf07f_magniber
-
Size
6.3MB
-
MD5
85f2d3a95f96296376e690b0d3ccf07f
-
SHA1
6a6ef47407fb5836b977997937bc9be21c27b6ac
-
SHA256
304c9441dda8c71ef1f999ce24316919a5a74f9352ce6f54ac473c6f1e48107c
-
SHA512
770c26540cb26ce01c6a6e569342afb0f4f5f9dd554a8475e068378a19cebf9a52e2a50824a1ddd6ca2193d91c99a71050ff3fba137d0c2625c803b84395cf3f
-
SSDEEP
196608:EF+3g0IQHdPtjOLokUebxVGqQG/xhkZ0sJ:LKQ9PtjSs/GnkZ0s
Score10/10-
Adds Run key to start application
-