General
-
Target
_doc07621220210416113300.cab
-
Size
297KB
-
Sample
210423-se22393e3j
-
MD5
15ae86a46e723c3a567442a02218bc61
-
SHA1
0658e153b3cb7469d993d64cae3e51e04900341f
-
SHA256
cb1606fa6e387118598b57f810cb767feaa1ab3c3d59a865c52af2ec75a81c6d
-
SHA512
d72d73e0b12c52ff7b7579c1b913ec48962426c4796f2d86f36dfb31b165a80987a913ca364859ceaa63e9c1c677e45d5d5e50e1e5118a9920f99289f3c45b58
Static task
static1
Behavioral task
behavioral1
Sample
doc07621220210416113300.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
doc07621220210416113300.exe
Resource
win10v20210410
Malware Config
Extracted
remcos
www.pakchoob.me:2404
Targets
-
-
Target
doc07621220210416113300.exe
-
Size
611KB
-
MD5
86a60c76f4734d8e5e664d4296b05d23
-
SHA1
bbd8bfae7c2449915d071899300aeb3de5030464
-
SHA256
1dc132d54524bfd99e713b47052ec9fc2a59fcbb46d70c732426cf228446e17e
-
SHA512
8ac001844e94a5bac88d3abf6f5a1d6a904d0443e29e78c9b41ab7b2f06995ea2a4d78d9829f61467ec2217c2db51b8dc33abda4caab7712c0dbebbb022ffd68
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-