0f5f827620e6ecae9b58643c77b73f3bb4ba9d2acfd13671cde6676053fa1b0b | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
11-07-2022 12:05

Sharing

Report Analysis Logs

General

Target

b388723551a4f3255525c6a50b48e58b02b132a8.exe
Size

6.7MB
MD5

8abb9a077c2e55cce483f9b80f002236
SHA1

b388723551a4f3255525c6a50b48e58b02b132a8
SHA256

0f5f827620e6ecae9b58643c77b73f3bb4ba9d2acfd13671cde6676053fa1b0b
SHA512

85563bf040dd27a094aefeb52018dad5f29559cb724875c67e54342af17ac3200fcec399989daa9d8fd6fe31e80f894cb2b31ac64b3d28a1456be235d273f948

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

Processes:

resource	yara_rule
behavioral1/memory/1580-54-0x0000000001110000-0x00000000028D0000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\b388723551a4f3255525c6a50b48e58b02b132a8.exe
"C:\Users\Admin\AppData\Local\Temp\b388723551a4f3255525c6a50b48e58b02b132a8.exe"
1⤵
PID:1580

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1580-54-0x0000000001110000-0x00000000028D0000-memory.dmp

Filesize
23.8MB

Download