General
- Target 04ddaf6cc79c9152cc4cb9d1bdb4da20adb4dbe62501c760a4df7a52f8b21b91
- Size 626KB
- Sample260709-ytdc2sh14v
- SHA256 04ddaf6cc79c9152cc4cb9d1bdb4da20adb4dbe62501c760a4df7a52f8b21b91
- MD5 fd0d0a3a65aa853640771222ef107dcb
- SHA1 0566b6574019a894fd391f75af581f43baa40f3a
- SHA512 cef2b35100999968ef920a0b503cf4d892bf9e990684643e05a0677fb140401a1ddc086a6926f9691821f4084953cf340f042fede7ce082be5a378c799ce011a
- SSDEEP 12288:yZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr1:sQKjlZQuaVWoqVpqsuJt6YcJYY05H
- TLSH T147D47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
04ddaf6cc79c9152cc4cb9d1bdb4da20adb4dbe62501c760a4df7a52f8b21b91.exe
Resource
win10v2004-20260513-en
0 signatures
60 seconds
Behavioral task
behavioral2
Sample
04ddaf6cc79c9152cc4cb9d1bdb4da20adb4dbe62501c760a4df7a52f8b21b91.exe
Resource
win11ltsc2024-20260709-en
0 signatures
60 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.2.6 Pro
Botnet
-
Remote
C2
-
46.151.182.209:8080
Attributes
-
audio_folder
MicRecords
-
audio_path
ApplicationPath
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-RL5P0W
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target 04ddaf6cc79c9152cc4cb9d1bdb4da20adb4dbe62501c760a4df7a52f8b21b91
- Size 626KB
- SHA256 04ddaf6cc79c9152cc4cb9d1bdb4da20adb4dbe62501c760a4df7a52f8b21b91
- MD5 fd0d0a3a65aa853640771222ef107dcb
- SHA1 0566b6574019a894fd391f75af581f43baa40f3a
- SHA512 cef2b35100999968ef920a0b503cf4d892bf9e990684643e05a0677fb140401a1ddc086a6926f9691821f4084953cf340f042fede7ce082be5a378c799ce011a
- SSDEEP 12288:yZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr1:sQKjlZQuaVWoqVpqsuJt6YcJYY05H
- TLSH T147D47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10