0d1a70f426548e59a94c4244de64b1c9f33c3e0353d4cb456273d2171ca4af25

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
05/07/2024, 01:01

Target
0c286126eae5d8d419bac3830831dbcfd0deb2b375d21666de4eac3c9824f4a8.exe
Size 483KB
Sample240705-bc7t1aycjn
SHA256 0c286126eae5d8d419bac3830831dbcfd0deb2b375d21666de4eac3c9824f4a8
MD5 076a4a72c5285c9d30401f1c3f7d0c45
SHA1 e1e0a55107a970883aaa0e111ae36a3f0d901f8a
SHA512 a7cbeba2ffc91119a22d98a282d7b992aa23c8ce34793c7e7642cd2056f2d75f3c8d9a8fa44773408482a4307d4991dfcc4c188e9bf28aedfcbf55c03e733ab4
SSDEEP 6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNl5Gv:6X7tPMK8ctGe4Dzl4h2QnuPs/ZDccv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2240	0c286126eae5d8d419bac3830831dbcfd0deb2b375d21666de4eac3c9824f4a8.exe

C:\Users\Admin\AppData\Local\Temp\0c286126eae5d8d419bac3830831dbcfd0deb2b375d21666de4eac3c9824f4a8.exe
"C:\Users\Admin\AppData\Local\Temp\0c286126eae5d8d419bac3830831dbcfd0deb2b375d21666de4eac3c9824f4a8.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2240

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 d17c0939ad7f2dcef158f2bad98f7abe4bdf72ce35b507d182735635ce3a10fb
MD5 e51a21859f5382605ec87233e76f205f
SHA1 215db237c35e8c2fc24e65cd64a258d86c4b81b9
SHA512 04505731562c4d566db4530ddb6cbc582486c0b90e35c9df4049dd2fd697c556eea0d1dd2fff12a4d7254ebb9396d0356865db16542e404064b7541bbfe887dc
MD5 SHA1 SHA512

Submit Download