66c2f21e40264adb685ab7627039b4235c8cc40942ff8e1942b41189231023f3

Analysis

max time kernel
2s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28-10-2022 23:19

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\66c2f21e40264adb685ab7627039b4235c8cc40942ff8e1942b41189231023f3.exe command="C:\Users\Admin\AppData\Local\Temp\66c2f21e40264adb685ab7627039b4235c8cc40942ff8e1942b41189231023f3.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

66c2f21e40264adb685ab7627039b4235c8cc40942ff8e1942b41189231023f3.exe
Size

331KB
MD5

0a87252ef7abd35a8c85057fd443e670
SHA1

b199df2847647e7a78eed71f65a09a4da3efabbb
SHA256

66c2f21e40264adb685ab7627039b4235c8cc40942ff8e1942b41189231023f3
SHA512

ff6c3fe35b948bf2be875d291c25c13eb7730d4f8421edc0ab912411bff9c1e5044d1be2cfaf7125a2c0d726e91a5e491ea5a98cfcc37a439be4fc512b9f8d3b
SSDEEP

6144:EpjqEAKI2t+J3iYcBdbouZxLiBI3klNj2M3wOxbvJjh81+5PkO6ub:OD3I2t+oYC040lNj2MAKBq1BxE

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral1/memory/1184-54-0x0000000000010000-0x0000000000062C80-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\66c2f21e40264adb685ab7627039b4235c8cc40942ff8e1942b41189231023f3.exe
"C:\Users\Admin\AppData\Local\Temp\66c2f21e40264adb685ab7627039b4235c8cc40942ff8e1942b41189231023f3.exe"
1⤵
PID:1184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1184-54-0x0000000000010000-0x0000000000062C80-memory.dmp

Filesize
331KB

Download