d726dd9d519a5a8772a9057b25ee4cf44f144d956706596d6b2a1b66849677d2

Analysis

max time kernel
2s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04/10/2022, 05:47

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\d726dd9d519a5a8772a9057b25ee4cf44f144d956706596d6b2a1b66849677d2.exe command="C:\Users\Admin\AppData\Local\Temp\d726dd9d519a5a8772a9057b25ee4cf44f144d956706596d6b2a1b66849677d2.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

d726dd9d519a5a8772a9057b25ee4cf44f144d956706596d6b2a1b66849677d2.exe
Size

737KB
MD5

4427e133a7028ba6847a2c8da1bb397f
SHA1

116c4851a7aa9b5ec21935bc3fb4c5425661ab01
SHA256

d726dd9d519a5a8772a9057b25ee4cf44f144d956706596d6b2a1b66849677d2
SHA512

7bce4f908b243ddbc7f614340802142c085e7ec43b691c45e87f6afe9e9d2d59123b04894e6e38ca630e624df475eb03f92b91e0925236ee426628323eeec445
SSDEEP

12288:6L/ywhUSQ4r56RHwy/8jZJUj+OSxsRhk2VUpOiQmjN7Wc1fefop/WwHAm9kx:WNh3Q+5G4LUjr2LpuEdWc0AWi9kx

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral1/memory/1764-54-0x0000000000010000-0x000000000016F000-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\d726dd9d519a5a8772a9057b25ee4cf44f144d956706596d6b2a1b66849677d2.exe
"C:\Users\Admin\AppData\Local\Temp\d726dd9d519a5a8772a9057b25ee4cf44f144d956706596d6b2a1b66849677d2.exe"
1⤵
PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1764-54-0x0000000000010000-0x000000000016F000-memory.dmp

Filesize
1.4MB

Download