General
-
Target
ded2e84649f2d5ce1a1e337f7e078607.exe
-
Size
482KB
-
Sample
241007-zyjw3atdpk
-
MD5
ded2e84649f2d5ce1a1e337f7e078607
-
SHA1
527a42307997fd9a9765ad26ccb30ef7fbf61555
-
SHA256
8437a1cef307ece5da1d58f9e7eab7dde8a34776cfa51b975ab906b050698e23
-
SHA512
30032c61ea6edb6298ff7f5776ba126abc3d4715c7e33c240cbc2da47c3d8c268674007cbed08dd9eae37e44b9f989ffe84eaa2c2f44570c9236a7cc76b48336
-
SSDEEP
6144:jTz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZmAX4crnT4:jTlrYw1RUh3NFn+N5WfIQIjbs/ZmAT4
Behavioral task
behavioral1
Sample
ded2e84649f2d5ce1a1e337f7e078607.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ded2e84649f2d5ce1a1e337f7e078607.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
remcos
Nuevo
desconocido07092024.con-ip.com:1510
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
registros.dat
-
keylog_flag
false
-
keylog_folder
data
-
mouse_option
false
-
mutex
hjhytgfredfghyj-0BMJC3
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Capturas de pantalla
-
screenshot_path
%AppData%
-
screenshot_time
10
- startup_value
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
ded2e84649f2d5ce1a1e337f7e078607.exe
-
Size
482KB
-
MD5
ded2e84649f2d5ce1a1e337f7e078607
-
SHA1
527a42307997fd9a9765ad26ccb30ef7fbf61555
-
SHA256
8437a1cef307ece5da1d58f9e7eab7dde8a34776cfa51b975ab906b050698e23
-
SHA512
30032c61ea6edb6298ff7f5776ba126abc3d4715c7e33c240cbc2da47c3d8c268674007cbed08dd9eae37e44b9f989ffe84eaa2c2f44570c9236a7cc76b48336
-
SSDEEP
6144:jTz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZmAX4crnT4:jTlrYw1RUh3NFn+N5WfIQIjbs/ZmAT4
Score3/10 -