424a1c81f60681049180f9e1381a7482b5a67f10401a1537d2abf808664ac15e | Triage

Analysis

max time kernel
150s
max time network
147s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
28-06-2023 13:00

Sharing

Report Analysis Logs

General

Target

win.exe
Size

481KB
MD5

aaff912810ab1af3ca06067c96d9dcc0
SHA1

c53666935d362162928b5c0d891f3917edddf6d3
SHA256

424a1c81f60681049180f9e1381a7482b5a67f10401a1537d2abf808664ac15e
SHA512

2743815181e778046a45ea2aeee45871f8efb5c09ed265c0d5ef2d205e9aea57a7487a3b24bc1dcc24627184ea3db607cc92346895c9db0be07c2bfd4e1ea7da
SSDEEP

12288:vRXxReZj3WZfj/2eSseWFaIe2+f8CL47bs/Zf2aDU:vx7cyF2eSsewS8W47eZO

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1496	win.exe

C:\Users\Admin\AppData\Local\Temp\win.exe
"C:\Users\Admin\AppData\Local\Temp\win.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\remcos\logs.dat

Filesize
144B

MD5
0d8a8969e9f403965d76872efbfee6ac

SHA1
4259154f00e7ba491a9896bed386a285d028d971

SHA256
ad4713e0fea816491f5be02cf07e7a0dc3ad25fc69b9f2be5a56a940ad730afc

SHA512
a184571502339af91a45ef81738191352b4ee5bf9bbdbface0d8744da4ba679a83db385e9d8a1048e155ce00f913bf47984a23a5b9efd204871d82f415be5378

Download Submit