Analysis
- max time kernel
60s - max time network
37s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 20:11
Behavioral task
behavioral1
Sample
7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe
Resource
win10v2004-20260513-en
3 signatures
60 seconds
General
- Target 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe
- Size 626KB
- Sample260809-yyn1cavfjf
- SHA256 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666
- MD5 10872ff0df2cf74d728f05b8407e6796
- SHA1 9163082a420dce20826517414830dc8292450f99
- SHA512 5eae3799e70aeb49a6804c4518909ab751c60f0bd9f0927ac5a92d878dac1732d9f9cd9ca519f0d0b23d9debec92d334fcb9d3ec5db45240fd39162481913c7b
- SSDEEP 12288:IZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:uQKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T112D47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suricata alert: REMCOS RAT Malware Inbound C2 Communication 3 IoCs
Network activity triggered a Suricata alert
flow pid Process 1 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe 1 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe 1 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe - Suricata alert: REMCOS RAT Malware Outbound C2 Communication 5 IoCs
Network activity triggered a Suricata alert
flow pid Process 2 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe 2 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe 1 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe 1 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe 1 4592 7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe"C:\Users\Admin\AppData\Local\Temp\7d50479382c28334091e6b124abb0a5758059f39956a0ef5ecbcb4627eb1f666.exe"1⤵
- Suricata alert: REMCOS RAT Malware Inbound C2 Communication
- Suricata alert: REMCOS RAT Malware Outbound C2 Communication
PID:4592