Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05-04-2024 13:55
Behavioral task
behavioral1
Sample
1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe
Resource
win10v2004-20240226-en
General
-
Target
1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe
-
Size
483KB
-
MD5
a2559743b14ba6fbfdb54112ec7addf9
-
SHA1
ec6f6ac62ab4098735ce7d355d123ab125c8c596
-
SHA256
d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229
-
SHA512
5cf41affca3b3f7af51519e28c46299683834967bc6d747ae02eac300455be2ff1848b7f3164d01481f9d6e75f0d3ad26f2576eeb267d780ea1e2a9df6aecb51
-
SSDEEP
6144:cXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNM5Gv:cX7tPMK8ctGe4Dzl4h2QnuPs/ZsVcv
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exepid process 2384 1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\1712325245cc226d51885ef77b1cc5f09859aff0054330432691c1328fbdf88199018a7f16240.dat-decoded.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\ProgramData\remcos\logs.datFilesize
144B
MD52a1efddc929c9fd966b0c9854872b89b
SHA17d1e29e1d181f56ef679879c2743d6f8821746d0
SHA2560b4b6e516eecdd94f0fcea2b8bfd669a71301ebc63ed6410aaf234c1d2102550
SHA5124d5b1638b8933b2b2ebff8f9f92f24115c8db4d7e3e5724f05a5b7d470877a2bf294eb253105ffda716934894e5acbdadfff10730fcaf5ab5153c1e37c8f8175