Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-04-2024 13:56
Behavioral task
behavioral1
Sample
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
Resource
win10v2004-20240226-en
General
-
Target
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
-
Size
483KB
-
MD5
d64eaf4fdb118d765221f465c095ac33
-
SHA1
f0409173db5ca3ecbda5432ed85b9454d151d25b
-
SHA256
0f1d1af792a1caad8e0dc9a9057d7a3b06ed85f34672cdfec64aab4785c97383
-
SHA512
dd95d6a9f5c890d9541f1d71826cd38707c9e63f3fffe11786e22ff7d470d2dc67e51724863ca27d417f9af10f28072a1f585512487ab504b48efc8d58edc8df
-
SSDEEP
6144:cXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNJ5Gv:cX7tPMK8ctGe4Dzl4h2QnuPs/Zs8cv
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exepid process 2272 1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\ProgramData\remcos\logs.datFilesize
144B
MD5d06c586eaf5bb38e106486bc44b49314
SHA1f480e3cc56f4ad229a7a30c115460fdeb5501db9
SHA2564652d9ab99cf37b86227945640511f19c32f636147f6477c1d63c2fe67804aee
SHA51264224a3d6f3f818a287076cc5405acf73eed0d530fd08a1fdb7f130b00360f4de65e53a6888b01bb902eba922ddf070e9bfa4db31c6d499833839d6a72aacc32