4418bd5e6c473b18b422fa525609fc1048843496d45bfb0a7c5ee9216cc3f68e

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 01:24

Target
4418bd5e6c473b18b422fa525609fc1048843496d45bfb0a7c5ee9216cc3f68e.exe
Size 482KB
Sample240523-bslayagf59
SHA256 4418bd5e6c473b18b422fa525609fc1048843496d45bfb0a7c5ee9216cc3f68e
MD5 4cadcfbc01966e7247d9baa9c39ad5bf
SHA1 e1c8658831305d0a8159f5f611ba4beb4167fc6e
SHA512 e3f071b128ccb8ed240a33783624cfcd384111d14faf0d8118130e0ec66d8011872f63ce56145c4b0a61515b650f93045a200106cfd999d60de2218b9c407f39
SSDEEP 6144:UXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNea5Gv:UX7tPMK8ctGe4Dzl4h2QnuPs/ZDqcv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5108	4418bd5e6c473b18b422fa525609fc1048843496d45bfb0a7c5ee9216cc3f68e.exe

C:\Users\Admin\AppData\Local\Temp\4418bd5e6c473b18b422fa525609fc1048843496d45bfb0a7c5ee9216cc3f68e.exe
"C:\Users\Admin\AppData\Local\Temp\4418bd5e6c473b18b422fa525609fc1048843496d45bfb0a7c5ee9216cc3f68e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5108

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 88369a7e996e9d55c6f29c164181e92d1ab9db69b3c8243242a8cd1ccb189d6d
MD5 1305b327464349dadc1bd52b94b3cf00
SHA1 e7cfa2676bc351e27635e9ebe8763db13e78a02b
SHA512 0a5219d103781a7dc309ee5cc00ca423d138ae1e1a4179017d57e1d86ccbabcfa1f5af351309ba41fc8c619e48326763b1658d66fd04b441efc7181deb211615
MD5 SHA1 SHA512

Submit Download