ab2376d3623f23c58d246e9ae9214a7d917f86f1257ed1e4ad2e36e41f179c5e

Analysis

max time kernel
2s
max time network
21s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2022, 05:15

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\ab2376d3623f23c58d246e9ae9214a7d917f86f1257ed1e4ad2e36e41f179c5e.exe command="C:\Users\Admin\AppData\Local\Temp\ab2376d3623f23c58d246e9ae9214a7d917f86f1257ed1e4ad2e36e41f179c5e.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

ab2376d3623f23c58d246e9ae9214a7d917f86f1257ed1e4ad2e36e41f179c5e.exe
Size

326KB
MD5

0a50dd089b97f3fae5e2c38aab710d90
SHA1

b51fc0fcfed697a0526ed365a41ccbdba27f89f7
SHA256

ab2376d3623f23c58d246e9ae9214a7d917f86f1257ed1e4ad2e36e41f179c5e
SHA512

1d45caea72e63c490d8df812b9d4b39bdb0e915acf2099047cb8f4afac49d1601a51ac4428721486f42cad42a397ea312e7a93dc1138bf31dd1ad466a6cbbbb4
SSDEEP

6144:2NwrEz5FsL2vwNi/+po271dVAGp2pXThGFrDkyp0p0v01DwH2NGsmeKJ0pTAJXoJ:Ur35qm+Kg52pXThGmyp80v018BWB+4lL

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral2/memory/376-132-0x0000000000010000-0x0000000000061B80-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\ab2376d3623f23c58d246e9ae9214a7d917f86f1257ed1e4ad2e36e41f179c5e.exe
"C:\Users\Admin\AppData\Local\Temp\ab2376d3623f23c58d246e9ae9214a7d917f86f1257ed1e4ad2e36e41f179c5e.exe"
1⤵
PID:376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/376-132-0x0000000000010000-0x0000000000061B80-memory.dmp

Filesize
326KB

Download