Try VMRay Platform
Malicious
Classifications

Keylogger Backdoor Spyware

Threat Names

Remcos C2/Generic-A Mal/Generic-S Mal/HTMLGen-A

Remarks (2/2)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "4 minutes, 53 seconds" to "98.0 milliseconds" to reveal dormant functionality.

(0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

General

3.61 KB total sent, 10.08 KB total received
4 ports: 1808, 80, 443, 53
4 contacted IP addresses
0 URLs extracted
1 files downloaded
1 malicious hosts detected

DNS

185 Bytes sent, 428 Bytes received
3 queries for 3 domains
1 name server contacted
0 queries returned errors

HTTP/S

1.25 KB sent, 9.13 KB received
2 URLs, 2 contacted servers
2 sessions detected
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image