1ad28ce4f9f5a7e9b9ce2d0e655d4749490201ea7039231caf9f85d751f4f418

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
13/09/2023, 14:57

Target
bPF2.exe
Size 481KB
Sample230913-sbkrhsch21
SHA256 1ad28ce4f9f5a7e9b9ce2d0e655d4749490201ea7039231caf9f85d751f4f418
MD5 5b5bbe658e0d36010b3a1c020e15cd29
SHA1 da002836f552e6a3d7ccfcd41a4a1db5fac28909
SHA512 7f3d60d7d7225574b284bee54333a2afc998234a013163da4a91ea6106f4cea109f87f157f950c118bfbaaec5818a29cf53c999d1c11e2d099f9f38827f5322f
SSDEEP 12288:dRXxReZj3WZfj/2eSseWFaIe2+f8CL47bs/Zf2/DU:dx7cyF2eSsewS8W47eZO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3928	bPF2.exe

C:\Users\Admin\AppData\Local\Temp\bPF2.exe
"C:\Users\Admin\AppData\Local\Temp\bPF2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3928

registros.dat

Path C:\ProgramData\remcos\registros.dat
Size 144B
SHA256 dcb082486fd5baf3f2974e769fb94865e7424158038416106d6aad50335bc74e
MD5 93eb58a1875e8705d6ce8cd3f728edfb
SHA1 66b5ae22db39811b2e75ee9c4570476a6fe8c445
SHA512 b58c22d29cd965325e05b341cd1d55e67dc2207d47c6de72d57722ca2f137c05eba75302317d1ab191588d6d5520b035cc26e389bd18904165bf210620a655d7
MD5 SHA1 SHA512

Submit Download