Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-04-2024 13:57
Behavioral task
behavioral1
Sample
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
Resource
win10v2004-20240226-en
General
-
Target
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
-
Size
483KB
-
MD5
d64eaf4fdb118d765221f465c095ac33
-
SHA1
f0409173db5ca3ecbda5432ed85b9454d151d25b
-
SHA256
0f1d1af792a1caad8e0dc9a9057d7a3b06ed85f34672cdfec64aab4785c97383
-
SHA512
dd95d6a9f5c890d9541f1d71826cd38707c9e63f3fffe11786e22ff7d470d2dc67e51724863ca27d417f9af10f28072a1f585512487ab504b48efc8d58edc8df
-
SSDEEP
6144:cXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNJ5Gv:cX7tPMK8ctGe4Dzl4h2QnuPs/Zs8cv
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exepid process 2984 1712325245dd14de5ce8bd608ab9ed54b1036ba8bc99d838c1ed6d3361c8ac2ed8ec3c75ba394.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\ProgramData\remcos\logs.datFilesize
144B
MD54637d70964e16247d1831860bdb056a2
SHA1151bcc48749a5e7c66c6c8655f44a22aa8752921
SHA25626ee4760cba02f9235cd76bcd4f0b7fd146d7c97c6b41f0492695c7eb7d0fb6e
SHA5121e6cd1baa5ca83f664b5414363c58c89e89b0bc2ddb35a68b0260f35b2d82b15f74ba7e6fff5da876cba07f50112c3276749f82878dbeb1a04f550e426a1706c