General

  • Target

    remcos_a.exe

  • Size

    233KB

  • MD5

    7b73b1459d4eff3b15b57587688b5e2a

  • SHA1

    a4151e32040c259fe0947a9f5370f78f9390e767

  • SHA256

    a31d776927e6aaefe993384b5b1c5af93aa888ac858e30a1c44914eb71e3b975

  • SHA512

    1a3bc7820306c06becbdf0fa06452772a82b0810fbe9cf13011237cee0877117531a6ecb22b3aaf123c860d50905263eb1383ecf634c1704f22212cea1a18d8f

  • SSDEEP

    6144:ORLoVADCdeGx+T9mu2umTe7QBm+ip7BGP:OVWzQT9DmTaQBPidW

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • remcos_a.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections