d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229

Analysis

max time kernel
159s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/04/2024, 01:41

Target
d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe
Size 483KB
Sample240406-b4gf5agg2x
SHA256 d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229
MD5 a2559743b14ba6fbfdb54112ec7addf9
SHA1 ec6f6ac62ab4098735ce7d355d123ab125c8c596
SHA512 5cf41affca3b3f7af51519e28c46299683834967bc6d747ae02eac300455be2ff1848b7f3164d01481f9d6e75f0d3ad26f2576eeb267d780ea1e2a9df6aecb51
SSDEEP 6144:cXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNM5Gv:cX7tPMK8ctGe4Dzl4h2QnuPs/ZsVcv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3240	d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe

C:\Users\Admin\AppData\Local\Temp\d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe
"C:\Users\Admin\AppData\Local\Temp\d32356d6005e4b696a0145ec295b706c008c42f48beba21f6203094faf060229.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3240

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 60a1d1d331864be70a0d010ea2505883c6a194e8c9e13759728d770cc1e50157
MD5 63069d3d36053cfec1fc68f51a26e26f
SHA1 44fd4a3056a71674d9ee46aca3b298b9c14ced68
SHA512 3cb9dd4f6df4dc05e8ca01544e868c400f98ee7f40e549218d3b75d01e68ca41c86785f89382adc033853fd3e05116678b320387356e56ffa25c96603911b044
MD5 SHA1 SHA512

Submit Download