Analysis
- max time kernel
1s - platform
windows10-2004_x64 - resource
win10v2004-20220901-en - resource tags
- submitted
07/11/2022, 06:50
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe
command="C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The %1 application cannot be run in Win32 mode.
General
- Target 2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe
- Size 67KB
- Sample221107-hmaetachd4
- SHA256 2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841
Score
8/10
Malware Config
Signatures
- VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe"C:\Users\Admin\AppData\Local\Temp\2678f84344f576845e7fbdccd6867fbdbb5a545326923ac1af9738f5a419e841.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4908-132-0x0000000000010000-0x0000000000020E80-memory.dmp