Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b968197520499768e376d8321caac3dcf20806d1405794f059ea786fb7602343
-
Size
235KB
-
Sample
240806-eb1wvasfmg
-
MD5
d3fc3251fcf2ed8614353fbfaae35a95
-
SHA1
673cc9b3d29133268235b88c01f4283fd38248ed
-
SHA256
b968197520499768e376d8321caac3dcf20806d1405794f059ea786fb7602343
-
SHA512
12504bd60dbf22b1e664cdf7ef1dc5abbd5fe2834ce3cdb517857329202f4ab89c363768421e9ec14a6551a044cb77f39eca5534d68c94c55012dc1999d54a8b
-
SSDEEP
6144:acLOYl5OBzHxYI4m0cgh1ZoeQoDGU0fAw8m:aQl8scghXlDqAw8m
Behavioral task
behavioral1
Sample
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
remcos
5.1.1 Light
RemoteHost
192.168.1.6:8888
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-B9I9P1
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe
-
Size
430KB
-
MD5
298a7a066f6684d6d0166cbbbfd664a4
-
SHA1
b57b4c8bd303d0779c88c7449ca296efd2ca82db
-
SHA256
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c
-
SHA512
ad341fdf136984926d27b890ab4fe807e1afd1ab97c78225aa46929192b6544f4142151f15be19b61b1f5dbab4d178d5571d8cef6d57a209f6602df4a13a2f98
-
SSDEEP
6144:lvRscHtVzjwIRFzJZ2p26+jFWXYnj9iT2ebvXmUcCqkmAO2djXH7icD53:lvRs4OIm2hWX4U2ebvRUAd77n3
Score3/10 -