General
-
Target
doc07621220210416113300.exe
-
Size
611KB
-
Sample
210423-5hn2k17svs
-
MD5
86a60c76f4734d8e5e664d4296b05d23
-
SHA1
bbd8bfae7c2449915d071899300aeb3de5030464
-
SHA256
1dc132d54524bfd99e713b47052ec9fc2a59fcbb46d70c732426cf228446e17e
-
SHA512
8ac001844e94a5bac88d3abf6f5a1d6a904d0443e29e78c9b41ab7b2f06995ea2a4d78d9829f61467ec2217c2db51b8dc33abda4caab7712c0dbebbb022ffd68
Static task
static1
Behavioral task
behavioral1
Sample
doc07621220210416113300.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
doc07621220210416113300.exe
Resource
win10v20210410
Malware Config
Extracted
remcos
www.pakchoob.me:2404
Targets
-
-
Target
doc07621220210416113300.exe
-
Size
611KB
-
MD5
86a60c76f4734d8e5e664d4296b05d23
-
SHA1
bbd8bfae7c2449915d071899300aeb3de5030464
-
SHA256
1dc132d54524bfd99e713b47052ec9fc2a59fcbb46d70c732426cf228446e17e
-
SHA512
8ac001844e94a5bac88d3abf6f5a1d6a904d0443e29e78c9b41ab7b2f06995ea2a4d78d9829f61467ec2217c2db51b8dc33abda4caab7712c0dbebbb022ffd68
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-