c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
20-05-2024 01:14

Target

c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe
Size

483KB
MD5

652a00ef353b96cb34fde8d5efc47cce
SHA1

dd1f435551267542e945f2e1b5bc592ce90535e4
SHA256

c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44
SHA512

cb89354a85b4982e6894a1dec387e3ba3f357b9abed44aadafaa8c1efcaf1aa44484acf527ee7a10c6c8b34d1ac6f4b62b36be5658bda6bb635e7ada1494c0e7
SSDEEP

6144:mXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNc5Gv:mX7tPMK8ctGe4Dzl4h2QnuPs/ZD1cv

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe

pid process

1884 c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe

pid	process
1884	c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe

C:\Users\Admin\AppData\Local\Temp\c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe
"C:\Users\Admin\AppData\Local\Temp\c540faac263d4542f628a640199466b3dcc4cc7bb00db8ebb77e2893b694fd44.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1884

C:\ProgramData\remcos\logs.dat
Filesize
144B

MD5
27788aa68b6a3288bda65d40fb71b629

SHA1
372b97df68436a979a78b89a67b0232c36a562a6

SHA256
03211697968798ae8f42915d95f4d5bf0f00dae866adca7c651e85c6c5398ac0

SHA512
357707cae30bd3b70c7b5949c7e26241d2fee2f350c515e93d96770fad225606c80754d4a477a800d7d463f86642b97c1ffb31e4dc4941389408a20669a81d76

Download Submit