Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

260b51fd04...dd.exe

windows7-x64

3

260b51fd04...dd.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    260b51fd049e24b65776c1e70883eb4877cc8109ebe418982b0ec4db525f58dd.exe

  • Size

    416KB

  • MD5

    e87fdcb2a16ae7237d61aed2ca0fd582

  • SHA1

    3b643c89ab2000818a037b542d833047613e4b8b

  • SHA256

    260b51fd049e24b65776c1e70883eb4877cc8109ebe418982b0ec4db525f58dd

  • SHA512

    7024bd7ae06b3468a901b3682525bf94612bc2cbd03027fb9cd85e64c0b7b3a6521fd55ac5525fe79599d64fcabcb98c8ba5f22a52769a810072d21964231164

  • SSDEEP

    6144:MVOFpfTNHxOQCh9u96DncKfZqEcIJVLYww89yIRAOU+/XpcBDcBpOkS:MVOFpbNhCy6wvEBJVkwLjq+RcmOkS

Score
10/10
remotehostremcos

Malware Config

Extracted

Family

remcos

Version

3.3.0 Light

Botnet

RemoteHost

C2

3.144.195.31:443

Attributes
  • audio_folder

    MicRecords

  • audio_path

    %AppData%

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • install_path

    %AppData%

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • keylog_path

    %AppData%

  • mouse_option

    false

  • mutex

    Remcos-AP03VE

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • startup_value

    Remcos

  • take_screenshot_option

    false

  • take_screenshot_time

    5

  • take_screenshot_title

    notepad;solitaire;

Signatures

  • Remcos family
    remcos
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 260b51fd049e24b65776c1e70883eb4877cc8109ebe418982b0ec4db525f58dd.exe
    .exe windows:5 windows x86 arch:x86

    5ae30bdce3bbe82747ace747f7836c56


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.