Analysis date (UTC): 13 August 2020, 00:45Analysis environment: Windows 7 Pro, build 7601, x86

Purchasing_Order_00012012.exe

MD5:C1F0543F80F46A867D38CF9CD0D95A4E

SHA1:29DB19FDBDB8F41B724A0F87409F9499598820A3

SHA256:923483A20BFA8C7734FF5CD5F1D2EBB4A029EFE6AF2365CD4730A0955E038CCD

Analysis result

Threat level:Malicious activity

Tags:

ratremcostrojankeylogger

No info indicators.

PID	Process	Class	Message
3696	Purchasing_Order_00012012.exe	A Network Trojan was detected	REMOTE [PTsecurity] Remcos.RAT
3696	Purchasing_Order_00012012.exe	A Network Trojan was detected	REMOTE [PTsecurity] Remcos.RAT
3696	Purchasing_Order_00012012.exe	A Network Trojan was detected	REMOTE [PTsecurity] Remcos.RAT
3696	Purchasing_Order_00012012.exe	A Network Trojan was detected	REMOTE [PTsecurity] Remcos.RAT
3696	Purchasing_Order_00012012.exe	A Network Trojan was detected	REMOTE [PTsecurity] Remcos.RAT
3696	Purchasing_Order_00012012.exe	A Network Trojan was detected	REMOTE [PTsecurity] Remcos.RAT
3696	Purchasing_Order_00012012.exe	A Network Trojan was detected	REMOTE [PTsecurity] Remcos.RAT