2de5ee286e1c3c7f8bb1a63e818b874613ee09d9cf2a23d240b0fc77ec23a2ca | Triage

Analysis

max time kernel
35s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
22-06-2022 13:11

Sharing

Report Analysis Logs

General

Target

2de5ee286e1c3c7f8bb1a63e818b874613ee09d9cf2a23d240b0fc77ec23a2ca.exe
Size

4.1MB
MD5

66a130f4bc7eb10ddc4dffa8ece2e29e
SHA1

5f8ec29a12b8586fcd3258de859f58056e962be4
SHA256

2de5ee286e1c3c7f8bb1a63e818b874613ee09d9cf2a23d240b0fc77ec23a2ca
SHA512

13c9295e02e684c2cc6d18b6e03b434c1df048bda772bd1d859ede5211fc69ee379291975408c7f79c81922590eb6590bba692b8811ae7004a578c1ec8327e11

Score

7^/10

themida

Malware Config

Signatures

Themida packer 2 IoCs

Detects Themida, an advanced Windows software protection system.

Processes:

resource	yara_rule
behavioral1/memory/1208-54-0x0000000000400000-0x000000000081F000-memory.dmp	themida
behavioral1/memory/1208-55-0x0000000000400000-0x000000000081F000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\2de5ee286e1c3c7f8bb1a63e818b874613ee09d9cf2a23d240b0fc77ec23a2ca.exe
"C:\Users\Admin\AppData\Local\Temp\2de5ee286e1c3c7f8bb1a63e818b874613ee09d9cf2a23d240b0fc77ec23a2ca.exe"
1⤵
PID:1208

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1208-54-0x0000000000400000-0x000000000081F000-memory.dmp

Filesize
4.1MB

Download
memory/1208-55-0x0000000000400000-0x000000000081F000-memory.dmp

Filesize
4.1MB

Download