General
- Target 9ded9ab9d41048e4d9427f92b04d54f51d1ce05ac80a533bd4813c4439c4ba1b
- Size 626KB
- Sample260802-zlt69s1frd
- SHA256 9ded9ab9d41048e4d9427f92b04d54f51d1ce05ac80a533bd4813c4439c4ba1b
- MD5 c677a1cd42cb55f718b53fef4797b59a
- SHA1 609d2e87a7c1b217c07bb57d74e5ddc763333cf5
- SHA512 eaa54acf74699443f85a056cd2207576d6a895ce5d4873f65b8b9d44decff4070f527a71ac2eefc7e3a7106b9ab66dba984c6f4eeddee00f4e606737bd5172eb
- SSDEEP 12288:uZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:gQKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T1F8D47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9ded9ab9d41048e4d9427f92b04d54f51d1ce05ac80a533bd4813c4439c4ba1b.exe
Resource
win10v2004-20260513-en
0 signatures
60 seconds
Behavioral task
behavioral2
Sample
9ded9ab9d41048e4d9427f92b04d54f51d1ce05ac80a533bd4813c4439c4ba1b.exe
Resource
win11ltsc2024-20260709-en
0 signatures
60 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.2.6 Pro
Botnet
-
js
C2
-
161.248.179.98:2404
Attributes
-
audio_folder
MicRecords
-
audio_path
ApplicationPath
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-H8L0XM
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target 9ded9ab9d41048e4d9427f92b04d54f51d1ce05ac80a533bd4813c4439c4ba1b
- Size 626KB
- SHA256 9ded9ab9d41048e4d9427f92b04d54f51d1ce05ac80a533bd4813c4439c4ba1b
- MD5 c677a1cd42cb55f718b53fef4797b59a
- SHA1 609d2e87a7c1b217c07bb57d74e5ddc763333cf5
- SHA512 eaa54acf74699443f85a056cd2207576d6a895ce5d4873f65b8b9d44decff4070f527a71ac2eefc7e3a7106b9ab66dba984c6f4eeddee00f4e606737bd5172eb
- SSDEEP 12288:uZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:gQKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T1F8D47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10