General

  • Target
    09b930fd43842bf205b6e4182d9044ec9213b0aba4491294080a957b073a5b2f.exe
  • Size 494KB
  • Sample250807-nn5j8strt3
  • SHA256 09b930fd43842bf205b6e4182d9044ec9213b0aba4491294080a957b073a5b2f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • remcos

Version
  • 7.0.1 Pro

C2
  • angeleviagivenmebestthingsforbetterfeell.duckdns.org:14646

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 09b930fd43842bf205b6e4182d9044ec9213b0aba4491294080a957b073a5b2f.exe
    .exe 494KB

09b930fd43842bf205b6e4182d9044ec9213b0aba4491294080a957b073a5b2f.exe

  • IMPHASH 78a3bdf3c5b9bd3972e77fa90dce8f2d
  • SHA256 09b930fd43842bf205b6e4182d9044ec9213b0aba4491294080a957b073a5b2f
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
225227
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths