1ad28ce4f9f5a7e9b9ce2d0e655d4749490201ea7039231caf9f85d751f4f418

Analysis

max time kernel
150s
max time network
153s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/09/2023, 14:57

Target
bPF2.exe
Size 481KB
Sample230913-sbkrhsch21
SHA256 1ad28ce4f9f5a7e9b9ce2d0e655d4749490201ea7039231caf9f85d751f4f418
MD5 5b5bbe658e0d36010b3a1c020e15cd29
SHA1 da002836f552e6a3d7ccfcd41a4a1db5fac28909
SHA512 7f3d60d7d7225574b284bee54333a2afc998234a013163da4a91ea6106f4cea109f87f157f950c118bfbaaec5818a29cf53c999d1c11e2d099f9f38827f5322f
SSDEEP 12288:dRXxReZj3WZfj/2eSseWFaIe2+f8CL47bs/Zf2/DU:dx7cyF2eSsewS8W47eZO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1304	bPF2.exe

C:\Users\Admin\AppData\Local\Temp\bPF2.exe
"C:\Users\Admin\AppData\Local\Temp\bPF2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1304

registros.dat

Path C:\ProgramData\remcos\registros.dat
Size 144B
SHA256 8f68e9595e2fb00e8f71b119d00be1599a511a1feeeda31b01c2136b5d0fc681
MD5 c8f52815e2f58d01564a8e0b47eaeaae
SHA1 a5570e35bd1f829d8b93574d5db97e5d7faaf0c8
SHA512 3f5498463e9565e560049c28b0f49030fc545a1aebf2dacb8fb5e83e27af237784976d4a70f42c1fc67ef4e82326e4550f5dc32e2885a7b2bc0fd597d25ac5cf
MD5 SHA1 SHA512

Submit Download