General

  • Target

    themida_in_patch_2.exe

  • Size

    4.2MB

  • Sample

    230830-gsfcksdb4t

  • MD5

    ec88729db4d0161d63fe9c3b444fbd45

  • SHA1

    edbb30f09c93aaa07a7a0788af61ad93ee44c27c

  • SHA256

    ee305dfab9cb554ad4cbd2fe59b8b000e6eab42cdb00a7d68555276024b8235d

  • SHA512

    28dbda0efb514812d66f8872bed060e7abbe0b2618c81fc1a9c09c2227d172c5f3a8e5c1a0671f5499611eec4ee7417f0fff8a79b2ed20c6ee87e0aeedc4052a

  • SSDEEP

    98304:UhXUDteV9KyM5fwMedo2AX6x38eurs19eOpI0mAN3tKenT:E8euCpIT+3sa

Score
7/10

Malware Config

Targets

    • Target

      themida_in_patch_2.exe

    • Size

      4.2MB

    • MD5

      ec88729db4d0161d63fe9c3b444fbd45

    • SHA1

      edbb30f09c93aaa07a7a0788af61ad93ee44c27c

    • SHA256

      ee305dfab9cb554ad4cbd2fe59b8b000e6eab42cdb00a7d68555276024b8235d

    • SHA512

      28dbda0efb514812d66f8872bed060e7abbe0b2618c81fc1a9c09c2227d172c5f3a8e5c1a0671f5499611eec4ee7417f0fff8a79b2ed20c6ee87e0aeedc4052a

    • SSDEEP

      98304:UhXUDteV9KyM5fwMedo2AX6x38eurs19eOpI0mAN3tKenT:E8euCpIT+3sa

    Score
    7/10
    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks