9f5411bfa192d6d099aa19af966a620b17da4ee5c95e53c0897122eaaf8ae9e6

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 10:09

Target
MalwareBazaar.exe
Size 482KB
Sample240709-l7a4ma1bnf
SHA256 9f5411bfa192d6d099aa19af966a620b17da4ee5c95e53c0897122eaaf8ae9e6
MD5 75d689afb9d588ba45169a8cf4134972
SHA1 c8aab05beac46e73f65a5d8946ee2171bbdd8934
SHA512 661336be307d4bff932daaf283acfa848cfe744f3e5dc199ef439cec1f576a4edf4e0b17893e6fbcfc2a23992ea71739105721d2ab4d31b932c32f019babccc8
SSDEEP 6144:8XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNQ5Gv:8X7tPMK8ctGe4Dzl4h2QnuPs/ZDVcv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3508	MalwareBazaar.exe

C:\Users\Admin\AppData\Local\Temp\MalwareBazaar.exe
"C:\Users\Admin\AppData\Local\Temp\MalwareBazaar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3508

registros.dat

Path C:\ProgramData\remcos\registros.dat
Size 144B
SHA256 44a7d5fd317fdb14c0050e58a9c28c4bd6ccaac5ec8b4ea398af933f2dfa206b
MD5 261f3f1ba099e7708e370518f4fb0a4c
SHA1 8aaa4c69a5e0482afd4ffcf5ca88d1f54ead88d7
SHA512 ef3e320b709c2a022f45a92e645b2b2ba7bcd366f34c6e43d67a94efcc45bc1b1363fa9d759a3574007c52be41f724843db186e49dd87720ef803672300962a2
MD5 SHA1 SHA512

Submit Download