Overview

overview

3

Static

static

3

RMActivate.exe

windows7-x64

RMActivate.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    1s
  • max time network
    5s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11-10-2023 09:41

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\RMActivate.exe command="C:\Users\Admin\AppData\Local\Temp\RMActivate.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.
Report Analysis Logs

General

  • Target

    RMActivate.exe

  • Size

    528KB

  • MD5

    5030db8398d1b1e9275aa1c3f51aaa90

  • SHA1

    ba06f1aea9d2acf8457bed8b80d43fd917a97205

  • SHA256

    c8d1c813e5c85aacf82ee767d9233c397e9e18ad144a04fb71573c1f87faa597

  • SHA512

    ed2e67eae9bf39b43ff4dfcf5ba79da7f9caf6acb75ccfb5c9a5b9c10373c18697a101b74112251cdc32ac2b0baa8bd0e42f490bb03ead58053881b2ff9b6cd7

  • SSDEEP

    12288:3fOjDFGKcJzSZpD1nswafC/+KGidvQPxUQ4e1kVg6TeGaM:32j+SZpDVswIC/+KGiyP34e1kK6KxM

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\RMActivate.exe
    "C:\Users\Admin\AppData\Local\Temp\RMActivate.exe"
    1⤵
      PID:2532

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads