General
-
Target
dec4260af64a2b62d74139b2a4c8b6cd04348160b10b2b23bd352352952293ee.exe
-
Size
482KB
-
Sample
241003-cpnsbszapm
-
MD5
04b542f19c7d2f6fefc3bae86c56e80c
-
SHA1
d74d3912d78db179121f2842aa4a9e6a8ff854d4
-
SHA256
dec4260af64a2b62d74139b2a4c8b6cd04348160b10b2b23bd352352952293ee
-
SHA512
9933b87625e0a276b384e832afe790008fda04e52ef7285b4f7b79b9c45e0b3e90e7741228372202044d9a03105ddb87164b0e288b1c64c30f0b2a9035ec4589
-
SSDEEP
6144:KTz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZXAXkcrWT4:KTlrYw1RUh3NFn+N5WfIQIjbs/ZXBT4
Behavioral task
behavioral1
Sample
dec4260af64a2b62d74139b2a4c8b6cd04348160b10b2b23bd352352952293ee.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dec4260af64a2b62d74139b2a4c8b6cd04348160b10b2b23bd352352952293ee.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
remcos
Sost
sost1213.duckdns.org:2404
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
registros.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-ZLWPZ6
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Capturas de pantalla
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
dec4260af64a2b62d74139b2a4c8b6cd04348160b10b2b23bd352352952293ee.exe
-
Size
482KB
-
MD5
04b542f19c7d2f6fefc3bae86c56e80c
-
SHA1
d74d3912d78db179121f2842aa4a9e6a8ff854d4
-
SHA256
dec4260af64a2b62d74139b2a4c8b6cd04348160b10b2b23bd352352952293ee
-
SHA512
9933b87625e0a276b384e832afe790008fda04e52ef7285b4f7b79b9c45e0b3e90e7741228372202044d9a03105ddb87164b0e288b1c64c30f0b2a9035ec4589
-
SSDEEP
6144:KTz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZXAXkcrWT4:KTlrYw1RUh3NFn+N5WfIQIjbs/ZXBT4
Score3/10 -