2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/04/2024, 13:55

Target
1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe
Size 483KB
Sample240405-q75epadg8s
SHA256 2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17
MD5 8a8291aa1f1744763e496b5a609d766b
SHA1 4dc953163aafdba67a39d42e22ba82d55d729561
SHA512 53622bba0f949ad96b4b2066a6ad32e2e719f2e5f8b3e498a72bc920e0f9500fab0158278a861d7cb2da252522e0a085a810ed026e5225ce78c846bdca4e9852
SSDEEP 6144:m/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7W7ov:m/uPq3AfK496Gw0lwGXN3pvs/ZuL8v
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4728	1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe

C:\Users\Admin\AppData\Local\Temp\1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe
"C:\Users\Admin\AppData\Local\Temp\1712325246e9ef467ca10a8bb47cc22f360faab318b2059a09a5a7d0c76937a79cfb2a74b2831.dat-decoded.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4728

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 f177ade3d6888bcbf06a576c55d1347fcb7b835f28246ce5b000e312d5bc2052
MD5 8c437efedfec1dda97d90e21a381b2ec
SHA1 f92a6f9bdf3c2d3ed82627d7c38ca0b1381858e9
SHA512 a9b02b8b6ff7f021ae3b7c6b6f17a5f3ed0cce5f2a9b6cbc5bd14673fea97803588054f97f6285cc578885beec2055def08b19641403f4e933afa4a1d502fecc
MD5 SHA1 SHA512

Submit Download