General
- Target 48c9d227e08a27a15770c5f83e19bf156d716de0d9713c2788e7a94aa23f772a
- Size 632KB
- Sample260809-yzqwbscc84
- SHA256 48c9d227e08a27a15770c5f83e19bf156d716de0d9713c2788e7a94aa23f772a
- MD5 e6e0faaa32767f523d7c1ae2650a65d7
- SHA1 494f7e01d6824ed7cbb74e46ea006fb0ee1dc635
- SHA512 7f3f4fa7e1aac2ae7e7af06183289416d23e3aa8596514248662aa7120eebff12d4e94e24d9437e96f8ef737085af47550828964856463941592a7f8453253e5
- SSDEEP 12288:mZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5gRq:IQKjlZQuaVWoqVpqsuJt6YcJYY05h
- TLSH T1CFD47D5AA3A401F4D077C235CA838537E6B2BC056670866F13D74E5B6F232A15F3EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
48c9d227e08a27a15770c5f83e19bf156d716de0d9713c2788e7a94aa23f772a.exe
Resource
win10v2004-20260513-en
0 signatures
60 seconds
Behavioral task
behavioral2
Sample
48c9d227e08a27a15770c5f83e19bf156d716de0d9713c2788e7a94aa23f772a.exe
Resource
win11ltsc2024-20260709-en
0 signatures
60 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.2.6 Pro
Botnet
-
JULIO 29 MUCHACHA
C2
-
quotationlp.quotationlp.com:2206
Attributes
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
Acobatlg.exe
-
copy_folder
edqelofh
-
delete_file
false
-
hide_file
true
-
hide_keylog_file
false
-
install_flag
false
-
install_path
%AppData%
-
keylog_crypt
true
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
costeog
-
mouse_option
false
-
mutex
Rmc-UCO9L7
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target 48c9d227e08a27a15770c5f83e19bf156d716de0d9713c2788e7a94aa23f772a
- Size 632KB
- SHA256 48c9d227e08a27a15770c5f83e19bf156d716de0d9713c2788e7a94aa23f772a
- MD5 e6e0faaa32767f523d7c1ae2650a65d7
- SHA1 494f7e01d6824ed7cbb74e46ea006fb0ee1dc635
- SHA512 7f3f4fa7e1aac2ae7e7af06183289416d23e3aa8596514248662aa7120eebff12d4e94e24d9437e96f8ef737085af47550828964856463941592a7f8453253e5
- SSDEEP 12288:mZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5gRq:IQKjlZQuaVWoqVpqsuJt6YcJYY05h
- TLSH T1CFD47D5AA3A401F4D077C235CA838537E6B2BC056670866F13D74E5B6F232A15F3EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10