2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841

Analysis

max time kernel
1s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 06:50

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe command="C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe
Size

67KB
MD5

053441e82e1aa51497f168acda383d30
SHA1

329cd34b46eb0d86ca396a466da6f18937e89ebc
SHA256

2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841
SHA512

8ee5d7794eea9eb661b1b6906a258d71715eeac9dc0d7c2ac641a1ff205219c8f579d440f60f5d42b0b1f7ada15f2d481317a9956a2198189a67bcc5169e136c
SSDEEP

1536:j52PF87Jm2bBsv1y7e/ZjywfN4dKYdaCxpsyxpJZWYNQbObu6dgVnh:j52+QEBfS/VlCLRxp55QbIdg5h

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral2/memory/4908-132-0x0000000000010000-0x0000000000020E80-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe
"C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe"
1⤵
PID:4908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4908-132-0x0000000000010000-0x0000000000020E80-memory.dmp

Filesize
67KB

Download