General
-
Target
6b7fe63b50ab0d33a09ef51d2a1fdb02d6b0071a74611bdbc6ad3d7994d81bbe
-
Size
483KB
-
Sample
241130-yccp7asqbv
-
MD5
212f7ec2334beec71b6d8af5809b8b33
-
SHA1
d1133db76c2dd3095712df474089ff6d3ca5959b
-
SHA256
6b7fe63b50ab0d33a09ef51d2a1fdb02d6b0071a74611bdbc6ad3d7994d81bbe
-
SHA512
a537d6f74508d858bced65f162c29142efd530d3df0b84a4ee0d03b1e2c99f339469ff792b92a25c35e73cd9091803deebb9dec1000c7f27ff6519d1286f0071
-
SSDEEP
6144:5Tz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZmAX4crfT4:5TlrYw1RUh3NFn+N5WfIQIjbs/Zm8T4
Behavioral task
behavioral1
Sample
6b7fe63b50ab0d33a09ef51d2a1fdb02d6b0071a74611bdbc6ad3d7994d81bbe.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6b7fe63b50ab0d33a09ef51d2a1fdb02d6b0071a74611bdbc6ad3d7994d81bbe.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
remcos
RemoteHost
remcoctubre2024.duckdns.org:4576
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-BOKGRR
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
-
Target
6b7fe63b50ab0d33a09ef51d2a1fdb02d6b0071a74611bdbc6ad3d7994d81bbe
-
Size
483KB
-
MD5
212f7ec2334beec71b6d8af5809b8b33
-
SHA1
d1133db76c2dd3095712df474089ff6d3ca5959b
-
SHA256
6b7fe63b50ab0d33a09ef51d2a1fdb02d6b0071a74611bdbc6ad3d7994d81bbe
-
SHA512
a537d6f74508d858bced65f162c29142efd530d3df0b84a4ee0d03b1e2c99f339469ff792b92a25c35e73cd9091803deebb9dec1000c7f27ff6519d1286f0071
-
SSDEEP
6144:5Tz+c6KHYBhDc1RGJdv//NkUn+N5Bkf/0TELRvIZPjbsAOZZmAX4crfT4:5TlrYw1RUh3NFn+N5WfIQIjbs/Zm8T4
Score3/10 -