Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 13:55

General

  • Target

    1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe

  • Size

    483KB

  • MD5

    8a8291aa1f1744763e496b5a609d766b

  • SHA1

    4dc953163aafdba67a39d42e22ba82d55d729561

  • SHA256

    2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17

  • SHA512

    53622bba0f949ad96b4b2066a6ad32e2e719f2e5f8b3e498a72bc920e0f9500fab0158278a861d7cb2da252522e0a085a810ed026e5225ce78c846bdca4e9852

  • SSDEEP

    6144:m/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7W7ov:m/uPq3AfK496Gw0lwGXN3pvs/ZuL8v

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe
    "C:\Users\Admin\AppData\Local\Temp\1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\logs.dat
    Filesize

    144B

    MD5

    9675c2bef8d463e70db3d2a2d035d66d

    SHA1

    4f9dc7a15096d69754e2c01ab84600f1c20fa941

    SHA256

    192231d6bcb37d0ccd65a403c63c089d18475f190b453ecea28423f5759e099f

    SHA512

    648b9300d6b652b276949564fe186546f73764a93e03af997d9af4ffe7ef3315fcc4a264f43ca832ab75fe0a784594d9783dc6b6082ff69615f6d6ccd81be6fd