dc5b4ec96a672f817755502602908e0b15db7811cf233a840415ff2736e14be3

Analysis

max time kernel
3s
max time network
3s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
21/11/2022, 13:10

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\dc5b4ec96a672f817755502602908e0b15db7811cf233a840415ff2736e14be3.exe command="C:\Users\Admin\AppData\Local\Temp\dc5b4ec96a672f817755502602908e0b15db7811cf233a840415ff2736e14be3.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

dc5b4ec96a672f817755502602908e0b15db7811cf233a840415ff2736e14be3.exe
Size

71KB
MD5

12249bf6c9eac0161928135a74058ba0
SHA1

519bb765ce57d74e020c538be3b93f32692123e6
SHA256

dc5b4ec96a672f817755502602908e0b15db7811cf233a840415ff2736e14be3
SHA512

23992c3714c33f4eb35e7b7b2ebf98de5ebf4de60a9cfe424d834e4402d4c4e06d806ab57b4c0f858f8e27ed74090cd0935fd15b3ce63a824777b9feec398c70
SSDEEP

1536:fhS6E8xicaNA+rsH5WAzGeSlIV8BAR2H+n63VtTKXzgJSbEL:ZK80cR15l8lIV8CR2H+k/TKXzM0q

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral2/memory/4340-132-0x0000000000010000-0x0000000000021E80-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\dc5b4ec96a672f817755502602908e0b15db7811cf233a840415ff2736e14be3.exe
"C:\Users\Admin\AppData\Local\Temp\dc5b4ec96a672f817755502602908e0b15db7811cf233a840415ff2736e14be3.exe"
1⤵
PID:4340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4340-132-0x0000000000010000-0x0000000000021E80-memory.dmp

Filesize
71KB

Download