Analysis

  • max time kernel
    150s
  • max time network
    159s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14-03-2024 01:53

General

  • Target

    SubzeroV1.exe

  • Size

    4.7MB

  • MD5

    5bc3cb23f10d70ffcfd2c3d2f3b5bbde

  • SHA1

    8fed3d43b7a73ad9a79f2086c54823201e524a5c

  • SHA256

    25fa4bcd77975a78591538b210e781ad3aff8b33a71527b5485256e048f4584a

  • SHA512

    24327571300b64967d31d626e186e52cad7c3ae022519b21e21ddf75c258a20e1ae12e8bc3ee0f0204b8e17f95d9daa23d4862228d974f745ecce578e99d0fb8

  • SSDEEP

    98304:jB+BcvOflzIyWSJRyyAFJ/MTvykHGkd1LU0ICfuVldEFBNnFWh:jB+vJE0av+LaCGSFLFU

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\SubzeroV1.exe
    "C:\Users\Admin\AppData\Local\Temp\SubzeroV1.exe"
    1⤵
      PID:860

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/860-0-0x0000000140000000-0x0000000140B74000-memory.dmp

      Filesize

      11.5MB