bf97d8b854216bb6db30c6bc4538410fbdf507a8b1cf64026390a7352b246a85

Analysis

max time kernel
148s
max time network
143s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
16-08-2023 02:04

Target

4f138cd5c06d63316037e0622fa6c9e91a6798c78a45730777296c332dc4b98c.exe
Size

478KB
MD5

b42aeffda940fb929770f7fac1d151f8
SHA1

bcebf4d8c90294ccd6abde7eb9185ab30fba0f1a
SHA256

4f138cd5c06d63316037e0622fa6c9e91a6798c78a45730777296c332dc4b98c
SHA512

4a9eef7f337efda5b782704e44c673b1ac888bea3ea27f01d36bc086087249f6d39b25d3856354251bb6a4d0814109de2e3745124eea2813928169b1d874a43f
SSDEEP

6144:61EwL0xQk9VdeLuVnQs8QLgt8cBvnkCX/3Rde+A+DdsAOZZiXXPcNJ2OhX:61EZT90uNQzYgScBvnn/XpTs/ZiFOhX

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

4f138cd5c06d63316037e0622fa6c9e91a6798c78a45730777296c332dc4b98c.exe

pid process

2192 4f138cd5c06d63316037e0622fa6c9e91a6798c78a45730777296c332dc4b98c.exe

pid	process
2192	4f138cd5c06d63316037e0622fa6c9e91a6798c78a45730777296c332dc4b98c.exe

C:\Users\Admin\AppData\Local\Temp\4f138cd5c06d63316037e0622fa6c9e91a6798c78a45730777296c332dc4b98c.exe
"C:\Users\Admin\AppData\Local\Temp\4f138cd5c06d63316037e0622fa6c9e91a6798c78a45730777296c332dc4b98c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2192

C:\ProgramData\remcos\logs.dat
Filesize
144B

MD5
43c2bc5d256edeb12b439a53e547ae02

SHA1
76a061af4e2e908b494c6d20cfc83f47f2e14328

SHA256
1e2b96f58994bd461676bad82625dd3716b59aae658d8918dce64fa53ed372c4

SHA512
75b2ab4d263050db913652f9d7f98eba4e651d3de1cfc5a948ae347688bdb530e866a5eed51170fdd8b518e36c5a43d5b63d5c2ed1906bfb908d001a1bc6e511

Download Submit