Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
03/07/2024, 15:12
Behavioral task
behavioral1
Sample
172001946670b1e83321a2b0b2afa526495dda6118492d61c1dbccf1f24b87b00c0e2fc524979.dat-decoded.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
172001946670b1e83321a2b0b2afa526495dda6118492d61c1dbccf1f24b87b00c0e2fc524979.dat-decoded.exe
Resource
win10v2004-20240611-en
1 signatures
150 seconds
General
- Target 172001946670b1e83321a2b0b2afa526495dda6118492d61c1dbccf1f24b87b00c0e2fc524979.dat-decoded.exe
- Size 483KB
- Sample240703-sk6ekswarl
- SHA256 0c286126eae5d8d419bac3830831dbcfd0deb2b375d21666de4eac3c9824f4a8
- MD5 076a4a72c5285c9d30401f1c3f7d0c45
- SHA1 e1e0a55107a970883aaa0e111ae36a3f0d901f8a
- SHA512 a7cbeba2ffc91119a22d98a282d7b992aa23c8ce34793c7e7642cd2056f2d75f3c8d9a8fa44773408482a4307d4991dfcc4c188e9bf28aedfcbf55c03e733ab4
- SSDEEP 6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNl5Gv:6X7tPMK8ctGe4Dzl4h2QnuPs/ZDccv
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1660 172001946670b1e83321a2b0b2afa526495dda6118492d61c1dbccf1f24b87b00c0e2fc524979.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\172001946670b1e83321a2b0b2afa526495dda6118492d61c1dbccf1f24b87b00c0e2fc524979.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\172001946670b1e83321a2b0b2afa526495dda6118492d61c1dbccf1f24b87b00c0e2fc524979.dat-decoded.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\remcos\logs.dat
- Size 144B
- SHA256 9db74c7d33978c48ae79657bb8d44f1c5c8268100f21b970ff7834592fdc9154
- MD5 747fd28a58948992cf6a68672b62dc44
- SHA1 424716fdc62d8adcb18f21bcace46d46e7f6a7eb
- SHA512 f9ba272d7ae7f9d193426d37f676a563239ad84a58d1df1696d84ffbe30aecd1faa69409d1c83578e548db6feb72eb6e2734a2239ff36c84df78e0f1376fe782
- MD5 SHA1 SHA512