Analysis

  • max time kernel
    148s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 13:55

General

  • Target

    1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe

  • Size

    483KB

  • MD5

    a2559743b14ba6fbfdb54112ec7addf9

  • SHA1

    ec6f6ac62ab4098735ce7d355d123ab125c8c596

  • SHA256

    d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229

  • SHA512

    5cf41affca3b3f7af51519e28c46299683834967bc6d747ae02eac300455be2ff1848b7f3164d01481f9d6e75f0d3ad26f2576eeb267d780ea1e2a9df6aecb51

  • SSDEEP

    6144:cXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNM5Gv:cX7tPMK8ctGe4Dzl4h2QnuPs/ZsVcv

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe
    "C:\Users\Admin\AppData\Local\Temp\1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\logs.dat
    Filesize

    144B

    MD5

    084d0ee288eed222cc0c296be9a98bd9

    SHA1

    c120f098dfe7edb3807a3278a0d5441a213627ce

    SHA256

    fd6beeb6a473a8793c5206f7f9a2afb137bab75515f417f8898a0105d6199b8d

    SHA512

    23d4b6f62d5451cdf9cfe04b5711eac478f09759a98c7709b86d63c8db67075a9ca564e2704468fc9bd3020a8751a3fbe256196832fd1a899d7201045708f7f1