404832b5a3e3cb6711773251dbd2842f60e691da2a8f1b768b9d295ad3adebbb | Triage

Analysis

max time kernel
156s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08-07-2022 20:18

Sharing

Report Analysis Logs

General

Target

404832b5a3e3cb6711773251dbd2842f60e691da2a8f1b768b9d295ad3adebbb.exe
Size

4.1MB
MD5

c5ffad0229f7df13b50a957bc63b275a
SHA1

ba66a065d7ee10d940203ccfa3d37f2812fd9074
SHA256

404832b5a3e3cb6711773251dbd2842f60e691da2a8f1b768b9d295ad3adebbb
SHA512

aa7c8b83cbb7247cb97f37c0e48987e1bec17160812dc302003f6dd22cad7e1a0439f1e24138f910643f5f08fba2f224fc93a641578441aa389fca9d36c817f3

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

Processes:

resource	yara_rule
behavioral2/memory/2672-130-0x0000000000400000-0x000000000081F000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\404832b5a3e3cb6711773251dbd2842f60e691da2a8f1b768b9d295ad3adebbb.exe
"C:\Users\Admin\AppData\Local\Temp\404832b5a3e3cb6711773251dbd2842f60e691da2a8f1b768b9d295ad3adebbb.exe"
1⤵
PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2672-130-0x0000000000400000-0x000000000081F000-memory.dmp

Filesize
4.1MB

Download
memory/2672-131-0x0000000000400000-0x000000000081F000-memory.dmp

Filesize
4.1MB

Download