Overview

overview

10

Static

static

10

xJtYxySK09bP.exe

windows7-x64

1

xJtYxySK09bP.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/07/2023, 17:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    xJtYxySK09bP.exe
  • Size 481KB
  • Sample230725-wek38sef53
  • SHA256 a780671fb8843df86eb6d9a17080a3dfe3caffc2a7ab3d19f5f60025f4e064bb
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\xJtYxySK09bP.exe
    "C:\Users\Admin\AppData\Local\Temp\xJtYxySK09bP.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:4512
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x2e0 0x2f4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4684

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        logs.dat
        • Path C:\ProgramData\remcos\logs.dat
        • Size 144B
        • SHA256 bc2d3e5f4bb4e83dde1b278f19cb5dad04b9f8101110e1573adfcc606335eff4
        • MD5 SHA1 SHA512
        Submit Download