Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-04-2024 13:55

General

  • Target

    1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe

  • Size

    483KB

  • MD5

    8a8291aa1f1744763e496b5a609d766b

  • SHA1

    4dc953163aafdba67a39d42e22ba82d55d729561

  • SHA256

    2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17

  • SHA512

    53622bba0f949ad96b4b2066a6ad32e2e719f2e5f8b3e498a72bc920e0f9500fab0158278a861d7cb2da252522e0a085a810ed026e5225ce78c846bdca4e9852

  • SSDEEP

    6144:m/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7W7ov:m/uPq3AfK496Gw0lwGXN3pvs/ZuL8v

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe
    "C:\Users\Admin\AppData\Local\Temp\1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\logs.dat

    Filesize

    144B

    MD5

    8c437efedfec1dda97d90e21a381b2ec

    SHA1

    f92a6f9bdf3c2d3ed82627d7c38ca0b1381858e9

    SHA256

    f177ade3d6888bcbf06a576c55d1347fcb7b835f28246ce5b000e312d5bc2052

    SHA512

    a9b02b8b6ff7f021ae3b7c6b6f17a5f3ed0cce5f2a9b6cbc5bd14673fea97803588054f97f6285cc578885beec2055def08b19641403f4e933afa4a1d502fecc