37229c7ea7c5245a666a8e82533f3428b83c029215984a01ea1c278bab6ead3f | Triage

Analysis

max time kernel
149s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
26-06-2022 00:20

Sharing

Report Analysis Logs

General

Target

37229c7ea7c5245a666a8e82533f3428b83c029215984a01ea1c278bab6ead3f.exe
Size

2.9MB
MD5

c3d3ac9463f045603f7ec561852a9c14
SHA1

2bc59e05126100725471c70de5dbb37170cc5d0e
SHA256

37229c7ea7c5245a666a8e82533f3428b83c029215984a01ea1c278bab6ead3f
SHA512

15affcd2627fe52c4241cd89b2a103e88532e2c3955b4d12d73d5750f12bf18108ebcf18b921f2e4ec907e99282f56589338afae88f354ccb40c92880c81229b

Score

7^/10

themida

Malware Config

Signatures

Themida packer 2 IoCs

Detects Themida, an advanced Windows software protection system.

Processes:

resource	yara_rule
behavioral2/memory/2528-130-0x0000000000400000-0x00000000013CE000-memory.dmp	themida
behavioral2/memory/2528-131-0x0000000000400000-0x00000000013CE000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\37229c7ea7c5245a666a8e82533f3428b83c029215984a01ea1c278bab6ead3f.exe
"C:\Users\Admin\AppData\Local\Temp\37229c7ea7c5245a666a8e82533f3428b83c029215984a01ea1c278bab6ead3f.exe"
1⤵
PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2528-130-0x0000000000400000-0x00000000013CE000-memory.dmp

Filesize
15.8MB

Download
memory/2528-131-0x0000000000400000-0x00000000013CE000-memory.dmp

Filesize
15.8MB

Download