Analysis
-
max time kernel
391s -
max time network
436s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
30/12/2022, 18:36
General
-
Target
RoboCo.exe
-
Size
638KB
-
MD5
dea0c6fd0fcb3f2ba6fe3d5692ba8de9
-
SHA1
029abed512915c83fa3ec2fa8e7d7170bdc5bd53
-
SHA256
f1c6a15a827b8511785f94249a31f772444ffd09cebdab8ab9300c8bd54a8bfb
-
SHA512
0113ed4e15222038fd2288a123255be30ee0a452d604bdcaaa541bddc1e0500a021a78205ba3ca9b946790d12fce3db082bf2a8bd6a74c2b86cdef608c76e0cb
-
SSDEEP
12288:f4eCNVX0HMHyHnHBXa9g3ez0L88888888888888888888888888888888888888Q:wJVX0HMHyHnHBXa9g3ez0FR6JtD
Score
1/10
Malware Config
Signatures
-
Modifies registry class 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RoboCo.exe"C:\Users\Admin\AppData\Local\Temp\RoboCo.exe"1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx