a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5

Analysis

max time kernel
299s
max time network
300s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 22:42

Target
a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe
Size 521KB
Sample240704-2m5eqswbnd
SHA256 a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5
MD5 75c0ba5a43d7ce93821ebcd787345ce5
SHA1 2a02d0f01e9660870383a482279aab1e03fcd2a5
SHA512 8b2cf654d79745aa1e0dbc21623e717126ceff800212f04cbb09a51ffb80a61a1f7ddf2ee2740795e39f07361cd78b495e52835f33e3b8ac3330c97b92b3e8fb
SSDEEP 6144:uXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZ5AXIcNLB5Gv:uX7tPMK8ctGe4Dzl4h2QnuPs/Z54cv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2016	a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe

C:\Users\Admin\AppData\Local\Temp\a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe
"C:\Users\Admin\AppData\Local\Temp\a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2016

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 3ac9adaf0ce1f1b8e08d59f0caa3dbe8937bc2904de22e3cd1b7ed6a2427ab16
MD5 5cee7e9a3a294d3daf7f67fff6233217
SHA1 cb9265c27cab5be4609005394b2424ab264cac1e
SHA512 5b3cb1f0c6f370497967d8744c91a388da39c13bdd1de70b47afbbd57a758f47cb379baaacb8005e1d33cc29f0984d12d00d61fc8bbd202a661b3b049e641b80
MD5 SHA1 SHA512

Submit Download