General
-
Target
myfile.exe
-
Size
483KB
-
Sample
240822-mzvczashng
-
MD5
c5e016a957b5fa4a57c270faf4290497
-
SHA1
a808e432bf742845ff5288ed8803b3d0ddd73dda
-
SHA256
1e6c77d2a9d95b129b92c3fd6830889718003ce4bfea838918294060a278304e
-
SHA512
6753ff798b842c8211ddfa471aab0645a8b5b558c0a9c24af74ccfd9e7763784d326f1c5c6c81ef272211643ea5859377a6aab600a1f56fa15915dea4dd00306
-
SSDEEP
6144:wTz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZBAXccrKT4:wTlrYw1RUh3NFn+N5WfIQIjbs/ZB9T4
Behavioral task
behavioral1
Sample
myfile.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
myfile.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
remcos
RemoteHost
gremlingreen.work.gd:3333
gremlingreen.work.gd:6666
gremlingreen.work.gd:9999
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-6YDYO9
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
myfile.exe
-
Size
483KB
-
MD5
c5e016a957b5fa4a57c270faf4290497
-
SHA1
a808e432bf742845ff5288ed8803b3d0ddd73dda
-
SHA256
1e6c77d2a9d95b129b92c3fd6830889718003ce4bfea838918294060a278304e
-
SHA512
6753ff798b842c8211ddfa471aab0645a8b5b558c0a9c24af74ccfd9e7763784d326f1c5c6c81ef272211643ea5859377a6aab600a1f56fa15915dea4dd00306
-
SSDEEP
6144:wTz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZBAXccrKT4:wTlrYw1RUh3NFn+N5WfIQIjbs/ZB9T4
Score3/10 -