General
-
Target
JaffaCakes118_eb2f5e83516287b514acba3a14eaeca18455d443db5ae8949c56acece871bcbe
-
Size
255KB
-
Sample
241221-zfzjsszjal
-
MD5
cb3fb5991dc2121bc4223db2151ca4d4
-
SHA1
683445747e751061a47a0a003fbde7675e618d33
-
SHA256
eb2f5e83516287b514acba3a14eaeca18455d443db5ae8949c56acece871bcbe
-
SHA512
75f9dab616fcacca3120069623da66a619da7a41fa3c0389b9c8f840d835c51d8749ee2af2ebd852ff3ddb7277d82a101dca5c31d51ea413d59ce0ec504df2b6
-
SSDEEP
6144:AmoI+d6J78OU1pL5VEK94Ss0m4d6WwsvqssgcHGn1h2dnKGwa/:17KUIL5VhhsWdd/Rn1h8Ko/
Malware Config
Extracted
remcos
testt
harveyautos110.ddns.net:2404
harveyautos111.hopto.org:2404
harveyautos112.ddns.net:2404
harvey205.camdvr.org:2404
harvey206.casacam.net:2404
harvey207.accesscam.org:2404
-
audio_folder
MicRecords
-
audio_path
%AppData%
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
install_path
%AppData%
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
keylog_path
%AppData%
-
mouse_option
false
-
mutex
fedtuicv-ENL0AJ
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
startup_value
Remcos
-
take_screenshot_option
false
-
take_screenshot_time
5
-
take_screenshot_title
wikipedia;solitaire;
Targets
-
-
Target
4d360c43c33251a91ea260075eae7f6d02fbbb885e9f15abb7da2ca31f51068a
-
Size
463KB
-
MD5
2c528cc769588b0e27903bc6cea1b32a
-
SHA1
6f8060e5f0d1944167c04b8e6d6b1a7c6bd963a7
-
SHA256
4d360c43c33251a91ea260075eae7f6d02fbbb885e9f15abb7da2ca31f51068a
-
SHA512
ff08287a8d09673477c336054a8f07acf078185f5f06007fde9f53fc21fa9e1ebe65251a09339ebb9c869ea4c5e76f0480a757d7366ad2b7b3b3cb66db48d2ba
-
SSDEEP
12288:roCqKde3G314caiojGRoaOd+2sfZsvVg:UAdIG314cFo4Od+NZSS
Score10/10-
Remcos
Remcos is a closed-source remote control and surveillance software.
-
Remcos family
-