a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5

Analysis

max time kernel
298s
max time network
302s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
04/07/2024, 22:42

Target
a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe
Size 521KB
Sample240704-2m5eqswbnd
SHA256 a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5
MD5 75c0ba5a43d7ce93821ebcd787345ce5
SHA1 2a02d0f01e9660870383a482279aab1e03fcd2a5
SHA512 8b2cf654d79745aa1e0dbc21623e717126ceff800212f04cbb09a51ffb80a61a1f7ddf2ee2740795e39f07361cd78b495e52835f33e3b8ac3330c97b92b3e8fb
SSDEEP 6144:uXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZ5AXIcNLB5Gv:uX7tPMK8ctGe4Dzl4h2QnuPs/Z54cv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4512	a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe

C:\Users\Admin\AppData\Local\Temp\a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe
"C:\Users\Admin\AppData\Local\Temp\a27bead1e189d19582a8456db502934beebe96361edb8e675619735f65dde0d5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4512

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 53d8b2c4ceb8deb7b34e393671c36cc4f2a88d4ad86593bd7c420f46c05a61bb
MD5 eebd5b8ea2053cbbd212e4c852d669ad
SHA1 e492dbbddc94e883a45f94ff1f00508922631ab0
SHA512 f1801625d3e8c4bb8e754df016c2af0e75d5c75408ab136f2db5ddc57276facfac758aa2789f9332a59ad51662ebac60ea7e12e14294b83cbaa00a96fe730d47
MD5 SHA1 SHA512

Submit Download