4dcc5fffb27a4f2e22e5716cad91ee708a9877c2ad21622101ed21aab911413f

Analysis

max time kernel
1s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 07:02

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\4dcc5fffb27a4f2e22e5716cad91ee708a9877c2ad21622101ed21aab911413f.exe command="C:\Users\Admin\AppData\Local\Temp\4dcc5fffb27a4f2e22e5716cad91ee708a9877c2ad21622101ed21aab911413f.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

4dcc5fffb27a4f2e22e5716cad91ee708a9877c2ad21622101ed21aab911413f.exe
Size

868KB
MD5

134cdd8bc02a355956a3b7fea55ba34e
SHA1

efa04ea29ab6b01648efd92053aece0804756226
SHA256

4dcc5fffb27a4f2e22e5716cad91ee708a9877c2ad21622101ed21aab911413f
SHA512

2ea9a3128a3a4863af94f6fc8c2d1a8c5703036af359178135a988b141114a9d0711300f6650be96bc28044b62e2249f6e5ad697e7e10d9731bfbeee92705b48
SSDEEP

24576:BlHD9ab4dpmkIK+BL5FQV6CtWj8n4cjGOEJPy:fQUXmkIKg5qPtWj5cjy

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
behavioral2/memory/4992-132-0x0000000000010000-0x00000000001B3000-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\4dcc5fffb27a4f2e22e5716cad91ee708a9877c2ad21622101ed21aab911413f.exe
"C:\Users\Admin\AppData\Local\Temp\4dcc5fffb27a4f2e22e5716cad91ee708a9877c2ad21622101ed21aab911413f.exe"
1⤵
PID:4992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4992-132-0x0000000000010000-0x00000000001B3000-memory.dmp

Filesize
1.6MB

Download