Analysis
- max time kernel
147s - max time network
134s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
28/05/2024, 17:50
Behavioral task
behavioral1
Sample
171691854703bf1130ca78ef4041ee58d9950902e1c0a124d93965554ad493b7cef0815bd3441.dat-decoded.exe
Resource
win7-20231129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
171691854703bf1130ca78ef4041ee58d9950902e1c0a124d93965554ad493b7cef0815bd3441.dat-decoded.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target 171691854703bf1130ca78ef4041ee58d9950902e1c0a124d93965554ad493b7cef0815bd3441.dat-decoded.exe
- Size 483KB
- Sample240528-weksgafb28
- SHA256 9c3b079f39ef256fc7bfc6cf55cd5f6bd0e58af3bbad9d573e87900898c7a057
- MD5 6f018405cb1b811527edb9a0740c9376
- SHA1 03517deaa4335bfdf75511adc224bd36aa4badeb
- SHA512 4c188ec5b1161ab888efab03688221f04179745b7bc48bed082e90b11340917f40ff42bdbf05bfe59668b571bc1acd8f0fe15a8a23f8779ee9a9171d23925c9e
- SSDEEP 6144:y/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7Y7ov:y/uPq3AfK496Gw0lwGXN3pvs/Zul8v
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2328 171691854703bf1130ca78ef4041ee58d9950902e1c0a124d93965554ad493b7cef0815bd3441.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\171691854703bf1130ca78ef4041ee58d9950902e1c0a124d93965554ad493b7cef0815bd3441.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\171691854703bf1130ca78ef4041ee58d9950902e1c0a124d93965554ad493b7cef0815bd3441.dat-decoded.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2328
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\remcos\logs.dat
- Size 144B
- SHA256 f89a9c5c965e62e06d1644268eca55a96ffd33a2cae5731aa36995c0fde13391
- MD5 41e7511267ed0f394a035c6a793d7b9e
- SHA1 b6efe2f8ecbc2debc209506924008f4f4a1f2b32
- SHA512 8b4d0eb6ccbee388a4e165ce0349a04d49d00e7a83174f2ae2e0b7e2d363e413ab9e6f1ab09b2a302a5a0ae00348f49cbbad57ffe862cf534d9f5b3973256399
- MD5 SHA1 SHA512