0986af462eaf8a1a2fd770259b663e0c82539764fc49f03755a0a8034e239231

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/04/2024, 01:07

Target
0986af462eaf8a1a2fd770259b663e0c82539764fc49f03755a0a8034e239231.exe
Size 483KB
Sample240410-bgt4psbc55
SHA256 0986af462eaf8a1a2fd770259b663e0c82539764fc49f03755a0a8034e239231
MD5 c64376d815b8e57d6a9b20a97e6bd5d9
SHA1 e3ce3036c9fa24209ee3337dfbd668449e238788
SHA512 89f451d7703c8d8c166a702466cf17d8da38462e73e2f7a5943763c4804a44447338c241e68d194eabb4f1f4bb626adbf17229db1b7a23ff50359879d1db6d22
SSDEEP 6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNv5Gv:6X7tPMK8ctGe4Dzl4h2QnuPs/ZDqcv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3624	0986af462eaf8a1a2fd770259b663e0c82539764fc49f03755a0a8034e239231.exe

C:\Users\Admin\AppData\Local\Temp\0986af462eaf8a1a2fd770259b663e0c82539764fc49f03755a0a8034e239231.exe
"C:\Users\Admin\AppData\Local\Temp\0986af462eaf8a1a2fd770259b663e0c82539764fc49f03755a0a8034e239231.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3624

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 282ba91a0f7521c71275a1c42f5e6154676b863f0068d34689c5e5d057fa09f9
MD5 1c6c5c5ee1c3da5659ce9c81320c44a4
SHA1 fa0ae89a9665348db75bf2dd148b7cb6b7b2fdbb
SHA512 ebfe74ee387fa34a821c7fed3a25499d23ee3b2e37a2cf84dd40c969c82781e62f21a48e2201219e55e36bc8cb7feed20a85680b4cb2511f44f5428f0c72bf4e
MD5 SHA1 SHA512

Submit Download