Analysis

  • max time kernel
    148s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-06-2023 01:55

General

  • Target

    242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845.exe

  • Size

    479KB

  • MD5

    56045d92e95bcd761cbed948b24e0c7b

  • SHA1

    a58fb81ea1490829f20cd383769f103fd96248bf

  • SHA256

    242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845

  • SHA512

    2b0943bb4517855bca44dc3e59d5c5e7e97394bc660ff85a857a98f7e1a54e7ca30a4e89d5e7195a92b7451964b8670067dc328217feb11f9edf8391f051c597

  • SSDEEP

    6144:k1EwL0xQk9VdeLuVnQs8QLgt8cBvnkCX/3Rde+A+DdsAOZZiXXPcNt2OhX:k1EZT90uNQzYgScBvnn/XpTs/ZiFOhX

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845.exe
    "C:\Users\Admin\AppData\Local\Temp\242b380501af0b04ba5a923dc78d4ecafa7415d8d48a43176293c81d9bb65845.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\logs.dat
    Filesize

    144B

    MD5

    214845e79d2b1bd2b55e0d5e0652088c

    SHA1

    7467eec813261082fc9628e46b18fbe1c44e5058

    SHA256

    669c89c790c999690687278134cf5938c6eef0ccaa94fc8a9debff149d2171ac

    SHA512

    1c5c0647b1f1fcbebca495765290a6acaab8efaa287f74bcf6ef3e090f524e622e27a84ff9da5a59a7bf938c779db244fdf861a079ad741b9266ea79dc55ac76