Overview

overview

10

Static

static

10

1732143786...ed.exe

windows7-x64

3

1732143786...ed.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-11-2024 23:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1732143786cec792bea7f8ce7f818c031173ce52fabd19dde842f74b07fc234dc9f3fa1dcf839.dat-decoded.exe

  • Size

    481KB

  • MD5

    a7ee819bfb900ad6d20ebe4d1da8af4c

  • SHA1

    b50f78b7447b040f57d115c70c5fb4e62cac70f3

  • SHA256

    b6331431d23acf4528527316a993890117bac208c604b054622efee21cbffcf5

  • SHA512

    2683efbd00d03bc838e65b8bcc0640faabfbc63e9055b5b81aa42f338b25cf5998271df877fdf5f8fe4a13a0f3d93cdbf0ae71261753333702a79a824f5685e8

  • SSDEEP

    12288:3uD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDST+DY:q09AfNIEYsunZvZ19ZAs

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1732143786cec792bea7f8ce7f818c031173ce52fabd19dde842f74b07fc234dc9f3fa1dcf839.dat-decoded.exe
    "C:\Users\Admin\AppData\Local\Temp\1732143786cec792bea7f8ce7f818c031173ce52fabd19dde842f74b07fc234dc9f3fa1dcf839.dat-decoded.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\registros.dat
    Filesize

    144B

    MD5

    a5cc327269383f70fa25d3b946a8dddc

    SHA1

    e707d018d435ee20e3d9389b31120d09de18f9e9

    SHA256

    150831ff746f71febb0017922cae004a24f9291519b50f40ec3a764b45fd64a6

    SHA512

    ce92eda0aba4e15aa6aa96014674aa862fa53845ccc46569d9c3781c1cbe5b95d0be1994a9b92dfe8d8361529a86df46e9f93fdf5eab9f6ea487d2ad0ecd14d4

    Download Submit