Analysis

  • max time kernel
    25s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    01-08-2023 06:49

General

  • Target

    modest-menu_v0.9.10/modest-menu.exe

  • Size

    14.3MB

  • MD5

    f0851119cec15d35a8f206f1ba446f86

  • SHA1

    5ff263672af7e81a344846b3bce1ff4e59f8b6cd

  • SHA256

    19a82f12d86829e768d226c0ec5e20a664f349d1bbabd3aaeade3ff3d7237282

  • SHA512

    2ccbe9d55b59bc22ce615f23a09baa66d15e88f7c44e8f5561c54b410d02cb309d40865fd22694470fc9cfbda69ad12fb699427778347e49db63d60a341cf5ea

  • SSDEEP

    393216:rO4LKZjqtG+kh/JUwReHLsLjbeeE8KohlBM2Dd1rzO:rrKZjLhDUHimEJhD

Score
7/10

Malware Config

Signatures

  • Themida packer 10 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\modest-menu_v0.9.10\modest-menu.exe
    "C:\Users\Admin\AppData\Local\Temp\modest-menu_v0.9.10\modest-menu.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2648-54-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-55-0x0000000077C60000-0x0000000077E09000-memory.dmp

    Filesize

    1.7MB

  • memory/2648-56-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-57-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-58-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-59-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-60-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-61-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-62-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-63-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-64-0x000000013F7C0000-0x0000000141BEF000-memory.dmp

    Filesize

    36.2MB

  • memory/2648-65-0x0000000077C60000-0x0000000077E09000-memory.dmp

    Filesize

    1.7MB