8cb3dac95f253d7757c16ed6449bd7a6fe76a04e031a886c92cc8bdf99d18c93

Analysis

max time kernel
37s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-11-2022 05:14

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\8cb3dac95f253d7757c16ed6449bd7a6fe76a04e031a886c92cc8bdf99d18c93.exe command="C:\Users\Admin\AppData\Local\Temp\8cb3dac95f253d7757c16ed6449bd7a6fe76a04e031a886c92cc8bdf99d18c93.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

8cb3dac95f253d7757c16ed6449bd7a6fe76a04e031a886c92cc8bdf99d18c93.exe
Size

304KB
MD5

123ea317bc965f5d520c810e84d4c460
SHA1

ab74f0ffd7179d4b153378277ab0736501643a16
SHA256

8cb3dac95f253d7757c16ed6449bd7a6fe76a04e031a886c92cc8bdf99d18c93
SHA512

0a4489f719ca6f8604a4675934899a96d930ce7c613de0e72afa4a648e882b929acd0bd8b7143d7a5f60cd4bfaf0a218aa92d498b185090e1f4be087fc851cee
SSDEEP

6144:z8eU63l2X43/WuoOqxOcPungG4M7RIe8vZ6CP1w8u2cR8Zuogzsv0buWsPk:X2X4+Rr8rgGl1Ie8vZ3P1w8+R8kogxyc

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral1/memory/808-54-0x0000000000010000-0x000000000005C180-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\8cb3dac95f253d7757c16ed6449bd7a6fe76a04e031a886c92cc8bdf99d18c93.exe
"C:\Users\Admin\AppData\Local\Temp\8cb3dac95f253d7757c16ed6449bd7a6fe76a04e031a886c92cc8bdf99d18c93.exe"
1⤵
PID:808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/808-54-0x0000000000010000-0x000000000005C180-memory.dmp

Filesize
304KB

Download