Overview

overview

10

Static

static

10

1732143786...ed.exe

windows7-x64

3

1732143786...ed.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    147s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20-11-2024 23:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1732143786cec792bea7f8ce7f818c031173ce52fabd19dde842f74b07fc234dc9f3fa1dcf839.dat-decoded.exe

  • Size

    481KB

  • MD5

    a7ee819bfb900ad6d20ebe4d1da8af4c

  • SHA1

    b50f78b7447b040f57d115c70c5fb4e62cac70f3

  • SHA256

    b6331431d23acf4528527316a993890117bac208c604b054622efee21cbffcf5

  • SHA512

    2683efbd00d03bc838e65b8bcc0640faabfbc63e9055b5b81aa42f338b25cf5998271df877fdf5f8fe4a13a0f3d93cdbf0ae71261753333702a79a824f5685e8

  • SSDEEP

    12288:3uD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDST+DY:q09AfNIEYsunZvZ19ZAs

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1732143786cec792bea7f8ce7f818c031173ce52fabd19dde842f74b07fc234dc9f3fa1dcf839.dat-decoded.exe
    "C:\Users\Admin\AppData\Local\Temp\1732143786cec792bea7f8ce7f818c031173ce52fabd19dde842f74b07fc234dc9f3fa1dcf839.dat-decoded.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2644

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\registros.dat
    Filesize

    144B

    MD5

    1b1e62528653ed4ab1be4ceb176d7638

    SHA1

    f2d380f853610e2df44ed079ca40a886513c729e

    SHA256

    6e7ce15be2c2ac00c3fb3f71e646180a431cd3b30383f6a9f850dcb9817390d4

    SHA512

    e1884d48d6a51c354641836a83583f262e3b77ac1a22ac129695ee58553f6ac9e9f6b95b6e45482b970f4d39c2eda243fd7f06abb4db7d3082fe2479de33c792

    Download Submit