55a3416183319a3cd2b635dc0b2966687d5ff3625831a8997dac420aa11b9f00

Analysis

max time kernel
1s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 06:46

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\55a3416183319a3cd2b635dc0b2966687d5ff3625831a8997dac420aa11b9f00.exe command="C:\Users\Admin\AppData\Local\Temp\55a3416183319a3cd2b635dc0b2966687d5ff3625831a8997dac420aa11b9f00.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

55a3416183319a3cd2b635dc0b2966687d5ff3625831a8997dac420aa11b9f00.exe
Size

326KB
MD5

0caa99f9bd6b9830b84b04952864b4d0
SHA1

18c18f078a978f9f547a406a13716bdce8de165d
SHA256

55a3416183319a3cd2b635dc0b2966687d5ff3625831a8997dac420aa11b9f00
SHA512

a5bb7711286a6a8a9be80690fabe166c92a223b1c3bbb43af976fc5f4c0091294ba942678aecf164e0eb1431bf697c9eb19e41cd0270ffe49f5a91a88a22bf9a
SSDEEP

6144:qzBrEz5FsL2vwNi/+po271dVAGp2pXThGFrDkyp0p0v01DwH2NGsmeKJ0pTAJXoJ:u235qm+Kg52pXThGmyp80v018BWB+4lL

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral1/memory/1204-54-0x0000000000010000-0x0000000000061B80-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\55a3416183319a3cd2b635dc0b2966687d5ff3625831a8997dac420aa11b9f00.exe
"C:\Users\Admin\AppData\Local\Temp\55a3416183319a3cd2b635dc0b2966687d5ff3625831a8997dac420aa11b9f00.exe"
1⤵
PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-54-0x0000000000010000-0x0000000000061B80-memory.dmp

Filesize
326KB

Download