Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 05:04

General

  • Target

    2848-2-0x0000000000240000-0x00000000009ED000-memory.exe

  • Size

    7.7MB

  • MD5

    f757d7a88f0cdb05a1bd8741ec1e25bc

  • SHA1

    76d899239b0a6ab5ed3be09f26ececdb99d1994e

  • SHA256

    1d12113666b4707941a12e6681a814359b96b2751f598f564bc4bd84608dc7cc

  • SHA512

    55f6c0d13bd17ada166bf341e777bc116b72f22caf6dd36e76dc5c33409306e6f000540a23ac1e0e95dd8959f06628e2e24b06126d57ed41df1c7c9cd0aa2a5c

  • SSDEEP

    98304:+FsM7fhuW6EsVMDzrIgKaaZSWLfgkWvei5X2liN6vSKFVH/0lKv255DxJnCMH2PT:qzfhuF2Wkvvz2nv/nsQuf7jWL

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2848-2-0x0000000000240000-0x00000000009ED000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2848-2-0x0000000000240000-0x00000000009ED000-memory.exe"
    1⤵
      PID:2216

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2216-0-0x0000000000940000-0x00000000010ED000-memory.dmp

            Filesize

            7.7MB