Analysis

  • max time kernel
    151s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 15:18

General

  • Target

    904480a222ff933d380185d5f64d7b6fef629466d80db09bfa90697472a302e3.exe

  • Size

    2.1MB

  • MD5

    e9560c30a04938ddc97ab8e6f3db1f2e

  • SHA1

    10fdc01530e8d1c7359ba4eb372309c6449a0587

  • SHA256

    904480a222ff933d380185d5f64d7b6fef629466d80db09bfa90697472a302e3

  • SHA512

    e500d0a7e56c3c082114b53149d246e0d6320cdc7f4cb1bfb99fccbee1fab0d71e562b7e0d502841f6606788043b71199f918d7208f772dfac4289b09fe070a7

  • SSDEEP

    49152:4P+JytwNNfZgXjgn7p1AOFIbeFbSu8ArKIwUxZo:rzAjo7pfFbB1LwUo

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\904480a222ff933d380185d5f64d7b6fef629466d80db09bfa90697472a302e3.exe
    "C:\Users\Admin\AppData\Local\Temp\904480a222ff933d380185d5f64d7b6fef629466d80db09bfa90697472a302e3.exe"
    1⤵
      PID:1984

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1984-132-0x0000000000400000-0x00000000008C0000-memory.dmp
      Filesize

      4.8MB

    • memory/1984-133-0x0000000002650000-0x0000000002738000-memory.dmp
      Filesize

      928KB