8152e6c6b226a3c11b6d0a358f611ac3f23630fc497f7875f2406041fe0f804e

Analysis

max time kernel
147s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 14:23

Target
8152e6c6b226a3c11b6d0a358f611ac3f23630fc497f7875f2406041fe0f804e.exe
Size 469KB
Sample240528-rqdfbaaa33
SHA256 8152e6c6b226a3c11b6d0a358f611ac3f23630fc497f7875f2406041fe0f804e
MD5 9c40eb080303978419e017d25c8713f4
SHA1 1ca2c580ca7293ef3b8d056ad75307aae0753c3d
SHA512 791f447816bf9c72edf74a1921f4624079180194d9621e4d90959e2d1dc3784c54ea216f2eacada66bca2d3cef54efe800cac05e33118ff19f39cd7ce0c877e9
SSDEEP 12288:Wmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSQn9:uiLJbpI7I2WhQqZ7Q9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
792	8152e6c6b226a3c11b6d0a358f611ac3f23630fc497f7875f2406041fe0f804e.exe

C:\Users\Admin\AppData\Local\Temp\8152e6c6b226a3c11b6d0a358f611ac3f23630fc497f7875f2406041fe0f804e.exe
"C:\Users\Admin\AppData\Local\Temp\8152e6c6b226a3c11b6d0a358f611ac3f23630fc497f7875f2406041fe0f804e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:792

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 ebba2beea95f6a2cc95614cd5b11470146b219bb33be1bfe97553eb46dc36de1
MD5 ab20c8f65813673434aecf869550011d
SHA1 cd7f8b22778a7625580fa2e077aee7ad5c3746e9
SHA512 f44562248b853821fe5f5673d94eda0a64f278476eb858615da0a40fb7bc5c8183d82c4964e473578a98997eb3182fdecf618e1da3ab1efa4e0b9b12012b236d
MD5 SHA1 SHA512

Submit Download