General

  • Target

    csrss.exe

  • Size

    5.0MB

  • MD5

    446e40f26c98e42e3abd6e5526456aa0

  • SHA1

    6bdf5a57434142685db6f378d454d3b0b394f66f

  • SHA256

    59d40b0109e2b024721bd4b2a1c2076408b6e5d7fc7b27a138dfdb570b6a7495

  • SHA512

    f5b23cbe3b3b74b27a2fdff2a5418d4adedee0c03568a1ba37ce880ba66cfcd7976d44f56b7991d072265a772da2bb98e6850c0b430a33c80b8e7064f77701ee

  • SSDEEP

    98304:B8V6MBf7VFFwZ9mYpnGvWBKkeD4XtkX5gVl+iQ/LAQt2tQ+96:k6MBfxL2nUKKkDm5gwDttGQ

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • csrss.exe
    .exe .ps1 windows x86