Analysis

  • max time kernel
    29s
  • max time network
    34s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/04/2023, 19:19

General

  • Target

    Revo Uninstaller Pro 5.1.1 Portable Win x64/x86/RevoUnPro.exe

  • Size

    20.8MB

  • MD5

    670f56108e6e851321bcc222617e3611

  • SHA1

    a905bd923d4b95080bb57c0674acfc1626cc0ea1

  • SHA256

    e7c194be7d6e092378e6b2e9be1620ba8527b6f60f9b25bc83b671f6dba5607b

  • SHA512

    d893d00593b1bf71201ec1b1b7258bdde86a6d7b22e4e3a5262a3fae27b3f106947454423e6db78d858863f0f7225e40be25a92f92a893e92eacc4d1e9fbca6c

  • SSDEEP

    196608:KZSXbSiI1pvEXuPjQ+7hBEDN0goUM7jnPLR7ydTxhbmWqPWpyR1pOIIIIIIIIIIF:KZSLSPmePvTEDGgBzhlqPWpyR1pB+

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Revo Uninstaller Pro 5.1.1 Portable Win x64\x86\RevoUnPro.exe
    "C:\Users\Admin\AppData\Local\Temp\Revo Uninstaller Pro 5.1.1 Portable Win x64\x86\RevoUnPro.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Revo Uninstaller Pro 5.1.1 Portable Win x64\settings.ini

    Filesize

    561B

    MD5

    670f64287117c8d7952e96b15ce82539

    SHA1

    885144381e53510b6e33e4c8e7aa88c61f4a5b0b

    SHA256

    9d31cc068dde0f590c9b054ec28a825c6cd9897214017da00c326a24b2c9ef79

    SHA512

    86804c5a192b9d9bc9553cbf893802e2a72cecaadd5db002b69c84f2239861ad5f32522cf0bf510dae833611364bbbc43f9a9ad0d2175abae07136b9cd330c54

  • C:\Users\Admin\AppData\Local\Temp\Revo Uninstaller Pro 5.1.1 Portable Win x64\settings.ini

    Filesize

    897B

    MD5

    544da5c7fe8d8339dfeefbb043252565

    SHA1

    1955691a45abde033b1cb4d9c1d91c5b314b5c36

    SHA256

    a00fea31e752718109a04a2c3152255ed41af6237f5a72f68bd17a40f8ba1aa7

    SHA512

    7880a0fad9b668d54c6017ffc7f731e704452146e69edcd5696589cf772d1706a1ee82cb0695b2dab9819f6fdb5b951f7333f67a29705596613bfee1a9e153c7