Resubmissions

06/06/2023, 21:56

230606-1ts5lsgd7w 8

06/06/2023, 21:56

230606-1tcsmafg88 7

06/06/2023, 21:54

230606-1sgp7afg86 7

Analysis

  • max time kernel
    21s
  • max time network
    24s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/06/2023, 21:56

General

  • Target

    PrimalClient-V2_FREE_FIX.exe

  • Size

    4.4MB

  • MD5

    113f2d267a119e6ed76b865c14e10908

  • SHA1

    59a548e235a5d4f5ace62673659ad18e85cbe8fd

  • SHA256

    9eb0e6014c8aa7f8222b3b5959648bb1addaf00ac873ae253d62ba57dca0b473

  • SHA512

    e2ef9ff60e2b4c502310e0a81ff8673f2bd7fecce38687c1a9f1e60170e8cbf9bab7615a89455b685a1df310e95b15041b38b37072129d5c0f47b4409917001a

  • SSDEEP

    98304:i0x63CAXVQvgRJRE/jU59A5Lg4r2t1ehkLa3dhkiDFmL43mhYE1d8:i0xQCU3ROVrUeh/FDt2aEQ

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe
    "C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe"
    1⤵
      PID:4840
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1992
      • C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe
        "C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe"
        1⤵
          PID:3384

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4840-133-0x00007FF7460D0000-0x00007FF746C0D000-memory.dmp

                Filesize

                11.2MB