d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229

Analysis

max time kernel
148s
max time network
151s
platform
windows7_x64
resource
win7-20240319-en
resource tags

arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
submitted
06/04/2024, 01:41

Target
d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe
Size 483KB
Sample240406-b4gf5agg2x
SHA256 d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229
MD5 a2559743b14ba6fbfdb54112ec7addf9
SHA1 ec6f6ac62ab4098735ce7d355d123ab125c8c596
SHA512 5cf41affca3b3f7af51519e28c46299683834967bc6d747ae02eac300455be2ff1848b7f3164d01481f9d6e75f0d3ad26f2576eeb267d780ea1e2a9df6aecb51
SSDEEP 6144:cXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNM5Gv:cX7tPMK8ctGe4Dzl4h2QnuPs/ZsVcv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2140	d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe

C:\Users\Admin\AppData\Local\Temp\d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe
"C:\Users\Admin\AppData\Local\Temp\d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2140

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 50b3e408b398ea6e38e63153aafc2e5e3bf9b83546e4db41203cb240e259dc4c
MD5 4db50aea32779f50c14d12721ba024e6
SHA1 e8db90f99fa825424b713da183419a0cc045bd86
SHA512 335a1903873c218daba44930815a6ec6a3faf47a8dd76b3261b4fca82e0e178df206b13db4afe3fece4750ba01c52e5f13d73b3b3a56afc2b848c0acb9c1e7d0
MD5 SHA1 SHA512

Submit Download