329d9ae3ad0e2a960d9fa27bfe2f78421c5ac6fc70bffd789aee5014a4abf4f4 | Triage

Resubmissions

11-08-2022 11:39

220811-nr9claefhq 7

11-08-2022 10:15

220811-l99pzadhel 7

Analysis

max time kernel
40s
max time network
44s
platform
windows7_x64
resource
win7-20220715-en
resource tags

arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
submitted
11-08-2022 10:15

Sharing

Report Analysis Logs

General

Target

329d9ae3ad0e2a960d9fa27bfe2f78421c5ac6fc70bffd789aee5014a4abf4f4.exe
Size

7.0MB
MD5

2c061258c7515e3cd7e7cdec8ea88b7a
SHA1

958ce1572b66e1d94c0aed4b354df87234ef69d7
SHA256

329d9ae3ad0e2a960d9fa27bfe2f78421c5ac6fc70bffd789aee5014a4abf4f4
SHA512

46493f6e92139062eb2a5736e95d3e57f40385faa8225d01d1c45d81e9acfc24c6fbdcad6fe9ebc0c4effffac64d432facbbe1f3fca27c0ea8c5aeb5a0df4176

Score

7^/10

themida

Malware Config

Signatures

Themida packer 2 IoCs

Detects Themida, an advanced Windows software protection system.

Processes:

resource	yara_rule
behavioral1/memory/1064-54-0x0000000000400000-0x0000000001054000-memory.dmp	themida
behavioral1/memory/1064-55-0x0000000000400000-0x0000000001054000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\329d9ae3ad0e2a960d9fa27bfe2f78421c5ac6fc70bffd789aee5014a4abf4f4.exe
"C:\Users\Admin\AppData\Local\Temp\329d9ae3ad0e2a960d9fa27bfe2f78421c5ac6fc70bffd789aee5014a4abf4f4.exe"
1⤵
PID:1064

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1064-54-0x0000000000400000-0x0000000001054000-memory.dmp

Filesize
12.3MB

Download
memory/1064-55-0x0000000000400000-0x0000000001054000-memory.dmp

Filesize
12.3MB

Download