d00151f9462b7381251d19527c54651b26ed96cd3a038edc298293c5999d2e44

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 17:52

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\d00151f9462b7381251d19527c54651b26ed96cd3a038edc298293c5999d2e44.exe command="C:\Users\Admin\AppData\Local\Temp\d00151f9462b7381251d19527c54651b26ed96cd3a038edc298293c5999d2e44.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

d00151f9462b7381251d19527c54651b26ed96cd3a038edc298293c5999d2e44.exe
Size

127KB
MD5

81da5802aac574733acf97cb42f88460
SHA1

069af6bf87b584d85a9a3435a3320d5a5113d69a
SHA256

d00151f9462b7381251d19527c54651b26ed96cd3a038edc298293c5999d2e44
SHA512

db5d1b274074a24967a554044b153da3d12928018ff234998fd27a7203943c749c76094fc330543643e3ce4188014ad79f6841d0840f29849885073a17cd2b3e
SSDEEP

1536:KdP1PKynENXFcj1DE4zK6r44f/YwbImqO8v5M7z42hno1AChzozmH6U445fL13cI:KdoNqBpzlfYwfqxmw22CzAxZFcpran

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral1/memory/1768-54-0x0000000000010000-0x000000000004F000-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\d00151f9462b7381251d19527c54651b26ed96cd3a038edc298293c5999d2e44.exe
"C:\Users\Admin\AppData\Local\Temp\d00151f9462b7381251d19527c54651b26ed96cd3a038edc298293c5999d2e44.exe"
1⤵
PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1768-54-0x0000000000010000-0x000000000004F000-memory.dmp

Filesize
252KB

Download