General
-
Target
2cca27a1d50a61f43ca12e55cbc3c2895b24d55ec0bd4adca2bd3c3b293b5f14
-
Size
430KB
-
Sample
240810-kqawvsxbrf
-
MD5
79a2e78c4143841c858653423002498b
-
SHA1
61b07ea16d3fda1cc274749af33ff593ab96eb2d
-
SHA256
2cca27a1d50a61f43ca12e55cbc3c2895b24d55ec0bd4adca2bd3c3b293b5f14
-
SHA512
352290666b324e55d86d243b2cf99cadc2b929f7e356a5f2da48213fde2f4850e059956f4e8de07c7b3543500f13ae6573f54480b49e0795b249b3ee4fbd1afe
-
SSDEEP
6144:lvRscHtVzjwIRFzJZ2p26+jFWXYnj9iT2ebvXmUcCqkmAO2djXH7icDt3:lvRs4OIm2hWX4U2ebvRUAd7733
Behavioral task
behavioral1
Sample
2cca27a1d50a61f43ca12e55cbc3c2895b24d55ec0bd4adca2bd3c3b293b5f14.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cca27a1d50a61f43ca12e55cbc3c2895b24d55ec0bd4adca2bd3c3b293b5f14.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
remcos
5.1.1 Light
RemoteHost
216.230.18.127:2404
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-PCMP1L
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
2cca27a1d50a61f43ca12e55cbc3c2895b24d55ec0bd4adca2bd3c3b293b5f14
-
Size
430KB
-
MD5
79a2e78c4143841c858653423002498b
-
SHA1
61b07ea16d3fda1cc274749af33ff593ab96eb2d
-
SHA256
2cca27a1d50a61f43ca12e55cbc3c2895b24d55ec0bd4adca2bd3c3b293b5f14
-
SHA512
352290666b324e55d86d243b2cf99cadc2b929f7e356a5f2da48213fde2f4850e059956f4e8de07c7b3543500f13ae6573f54480b49e0795b249b3ee4fbd1afe
-
SSDEEP
6144:lvRscHtVzjwIRFzJZ2p26+jFWXYnj9iT2ebvXmUcCqkmAO2djXH7icDt3:lvRs4OIm2hWX4U2ebvRUAd7733
Score3/10 -