General
-
Target
INQUIRY.exe
-
Size
447KB
-
Sample
210423-ybhbvv88w6
-
MD5
455e8ece9f31a1becb15adcab5be0b37
-
SHA1
a86310fe3489c342393deef49828d8d633570916
-
SHA256
5454ec6037767c7c675551dafd7c023e8bd974f7fce965aa94505b19151895f2
-
SHA512
ca6edf7d575bffb19a78b31d94bdb7e1f30c41c2a77c412495a833be99049f007b7d3c678696f27b77d9b02018e1cb28970d99fdd80c93c2f1e2eb1d459784a6
Static task
static1
Behavioral task
behavioral1
Sample
INQUIRY.exe
Resource
win7v20210410
Malware Config
Extracted
remcos
45.144.225.221:5090
Targets
-
-
Target
INQUIRY.exe
-
Size
447KB
-
MD5
455e8ece9f31a1becb15adcab5be0b37
-
SHA1
a86310fe3489c342393deef49828d8d633570916
-
SHA256
5454ec6037767c7c675551dafd7c023e8bd974f7fce965aa94505b19151895f2
-
SHA512
ca6edf7d575bffb19a78b31d94bdb7e1f30c41c2a77c412495a833be99049f007b7d3c678696f27b77d9b02018e1cb28970d99fdd80c93c2f1e2eb1d459784a6
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-