General
- Target facebook.exe
- Size 96KB
- Sample260916-e4qlksfm5v
- SHA256 550ed79b9c6e06d45e6ceb18f5b2327833bf3ecaf292699f54b075421b4a50ba
Score
10/10
Malware Config
Extracted
Family
-
remcos
Version
-
1.7 Pro
Botnet
-
Host
C2
-
ratu88hoki.com:443
-
goldieslot.co:443
-
bj88.fifa55we.com:443
-
fifa55n.com:443
-
e2bet.technology:443
-
cravenw.tv:443
-
fifa55dd.com:443
-
ebet188.co:443
-
trcasinobets.com:443
-
ajaib168slot.com:443
-
bj88-vnd.com:443
-
bj88g.com:443
-
bj884.com:443
-
bj38-top.online:443
-
damac-suncity.in.net:443
-
ug8828.com:443
-
sifang.buzz:443
-
bj38.jpn.com:443
-
bj38.nl:443
-
u888casino.vip:443
Attributes
-
audio_folder
audio
-
audio_path
%AppData%
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
install_path
%AppData%
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
keylog_path
%AppData%
-
mouse_option
false
-
mutex
remcos_hxrcxwjxtpynluv
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screens
-
screenshot_path
%AppData%
-
screenshot_time
1
-
startup_value
remcos
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target facebook.exe
- Size 96KB
- SHA256 550ed79b9c6e06d45e6ceb18f5b2327833bf3ecaf292699f54b075421b4a50ba
Score3/10