Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 03:34

General

  • Target

    0d1f3290c15c203d7eb461f9d3e85e3a.exe

  • Size

    1.3MB

  • MD5

    0d1f3290c15c203d7eb461f9d3e85e3a

  • SHA1

    0df94ca2fd627e0c0528d1ff78d4d4d3154081ea

  • SHA256

    0cefb6de228954e7fd89bb04e0ff9b3207925a066c9a32d43d717ad2304f848e

  • SHA512

    8f86bd0dff6c55c75c4419b2680a3a08eb7ec2fc5e95eb2ce34f1b3f7d3dc610e9c44ccb18f296e9bf0c2dfd1674f492db6f2f1973425bb45d8f7aacd0d44fa1

  • SSDEEP

    24576:/KyTwoVsahSI/r3qCPjEYZ2aEojlblO7HD6F0WXDzzkxQfTAr:/KohmV0ya2HilblODeFVz3zTu

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0d1f3290c15c203d7eb461f9d3e85e3a.exe
    "C:\Users\Admin\AppData\Local\Temp\0d1f3290c15c203d7eb461f9d3e85e3a.exe"
    1⤵
      PID:4652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4652-0-0x0000000000400000-0x0000000000671DFC-memory.dmp

      Filesize

      2.4MB

    • memory/4652-1-0x0000000002410000-0x0000000002411000-memory.dmp

      Filesize

      4KB

    • memory/4652-2-0x00000000024E0000-0x00000000025C4000-memory.dmp

      Filesize

      912KB

    • memory/4652-3-0x0000000000400000-0x0000000000671DFC-memory.dmp

      Filesize

      2.4MB

    • memory/4652-5-0x0000000002410000-0x0000000002411000-memory.dmp

      Filesize

      4KB