Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
17-04-2024 12:50
Behavioral task
behavioral1
Sample
2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17.exe
Resource
win10v2004-20240412-en
General
-
Target
2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17.exe
-
Size
483KB
-
MD5
8a8291aa1f1744763e496b5a609d766b
-
SHA1
4dc953163aafdba67a39d42e22ba82d55d729561
-
SHA256
2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17
-
SHA512
53622bba0f949ad96b4b2066a6ad32e2e719f2e5f8b3e498a72bc920e0f9500fab0158278a861d7cb2da252522e0a085a810ed026e5225ce78c846bdca4e9852
-
SSDEEP
6144:m/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7W7ov:m/uPq3AfK496Gw0lwGXN3pvs/ZuL8v
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17.exepid process 1988 2d35feecb9b427d2f48f6fd0dd5ef71eb7ba75fe024d7c6f9067490bbabc3c17.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\ProgramData\remcos\logs.datFilesize
144B
MD5bb0b210ff0fca402870c63b68bd2fd15
SHA1fe782e6c533886501e9dacaf2f5909c420babd4a
SHA25698e6d0d27fe683a612de544ce4f966a0eeabd87f89d925ade72460e191705854
SHA5128058cfe2c4ea080b523176952d449324887350773da631fa778ff0494b8d79cf9bfefed430b8d531f98b97469644618f4b0b0ab599bdcdd0948886e306c62c37