General
-
Target
adb52e96a97ee1e1230a180eeda41f5a77344351b4e87f4bbc755745fd099d04.exe
-
Size
482KB
-
Sample
241002-hlmnrasdrq
-
MD5
3ca373f62b4243e9d5b8e71456880117
-
SHA1
5221ca168f4ddf13746f3424dd8f967d1a8f4bca
-
SHA256
adb52e96a97ee1e1230a180eeda41f5a77344351b4e87f4bbc755745fd099d04
-
SHA512
7199cdd7e07b993b9bba3c8013c4f5243d63bc8fb52e8805be23adda5bbdb7e4240978a462f073fbf79913f0c6968e44e4cde901477df295dbff51e362e03d3c
-
SSDEEP
6144:KTz+c6KHYBhDc1RGJPv//NkUn+N5Bkf/0TELRvIZPjbsAOZZXAXkcrWT4:KTlrYw1RU33NFn+N5WfIQIjbs/ZXBT4
Behavioral task
behavioral1
Sample
adb52e96a97ee1e1230a180eeda41f5a77344351b4e87f4bbc755745fd099d04.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
adb52e96a97ee1e1230a180eeda41f5a77344351b4e87f4bbc755745fd099d04.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
remcos
Sost
sost1213.duckdns.org:2404
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
registros.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-ZLWPZ6
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Capturas de pantalla
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
adb52e96a97ee1e1230a180eeda41f5a77344351b4e87f4bbc755745fd099d04.exe
-
Size
482KB
-
MD5
3ca373f62b4243e9d5b8e71456880117
-
SHA1
5221ca168f4ddf13746f3424dd8f967d1a8f4bca
-
SHA256
adb52e96a97ee1e1230a180eeda41f5a77344351b4e87f4bbc755745fd099d04
-
SHA512
7199cdd7e07b993b9bba3c8013c4f5243d63bc8fb52e8805be23adda5bbdb7e4240978a462f073fbf79913f0c6968e44e4cde901477df295dbff51e362e03d3c
-
SSDEEP
6144:KTz+c6KHYBhDc1RGJPv//NkUn+N5Bkf/0TELRvIZPjbsAOZZXAXkcrWT4:KTlrYw1RU33NFn+N5WfIQIjbs/ZXBT4
Score3/10 -