Analysis

  • max time kernel
    60s
  • max time network
    43s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 15:30

General

  • Target

    $EXEDIR/RevoUninstallerProPortable/x64/RevoUnPro.exe

  • Size

    24.1MB

  • MD5

    967fcc1b34a4c13c5d6edab866d74ceb

  • SHA1

    656ed69a5b4b8d40594135e7de3254d98263fcb6

  • SHA256

    ccfd11d2a73602edf17f342851fed25d1121ef1a5b3e4e89cecf246a209e2767

  • SHA512

    ba2055906b675cf08ec25d02a2d1c728caa68057ff12eaf2176976175c2885d8a4a6996257e9e30805502b3d53dfc8ca829f0aa487f11fe14950f6c0e8cecabb

  • SSDEEP

    196608:/FDWbJ+qN3CmoM+n6Pqp2s5T6rzvuPTxhbmWqPWpyR1pOIIIIIIIIIIIIIIIIIIf:/FK1+qN2Mk6PqoshXFhlqPWpyR1pVU

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RevoUninstallerProPortable\x64\RevoUnPro.exe
    "C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RevoUninstallerProPortable\x64\RevoUnPro.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads