Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4d4b203f72...04.exe

windows7-x64

3

4d4b203f72...04.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d4b203f72413a42a31be62977b8a6508e7f04f9192913c432ab456b15fc3004

  • Size

    481KB

  • Sample

    241125-a1k5gavjak

  • MD5

    416df385ee8cc5b57c5869cff2142747

  • SHA1

    a79848e3b77e0e995dbc1b87c1a82b00bf4827eb

  • SHA256

    4d4b203f72413a42a31be62977b8a6508e7f04f9192913c432ab456b15fc3004

  • SHA512

    f76e9cb4adbfda277d87ea85473fe4554b77f8da4c0e86b073d31046a3f4cf37a75336eb44fa3d009d20cf28685a41f191148db8b3167524aa46e598eba9bca0

  • SSDEEP

    12288:LuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDSx+DY:O09AfNIEYsunZvZ19Z6s

Score
10/10
remcosremotehostdiscovery

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

C2

nextnewupdationsforu.duckdns.org:14645

Attributes
  • audio_folder

    MicRecords

  • audio_path

    ApplicationPath

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-EC111K

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      4d4b203f72413a42a31be62977b8a6508e7f04f9192913c432ab456b15fc3004

    • Size

      481KB

    • MD5

      416df385ee8cc5b57c5869cff2142747

    • SHA1

      a79848e3b77e0e995dbc1b87c1a82b00bf4827eb

    • SHA256

      4d4b203f72413a42a31be62977b8a6508e7f04f9192913c432ab456b15fc3004

    • SHA512

      f76e9cb4adbfda277d87ea85473fe4554b77f8da4c0e86b073d31046a3f4cf37a75336eb44fa3d009d20cf28685a41f191148db8b3167524aa46e598eba9bca0

    • SSDEEP

      12288:LuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDSx+DY:O09AfNIEYsunZvZ19Z6s

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.