Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 09:24

General

  • Target

    3588-2-0x00000000003D0000-0x0000000000B7B000-memory.exe

  • Size

    7.7MB

  • MD5

    9e3fb1848b03c831de2e58c80d1ed74f

  • SHA1

    cc49cb6295aa3f9ac124215141f482fbfe464d37

  • SHA256

    962dda2fc81a345e33de9559758b89f6a024b456e017493756802c77eea34253

  • SHA512

    66cf6286d2967b5b1885fe7a7b0c09835d4d877b74a39aabff6a269ab7eb4b4cca6a0d3d74a0beaf6baf9600c51c12c42f55bb8ca7d93dfbabdb99edc0e43531

  • SSDEEP

    196608:vzfhuFs60OH3mffEqKhpfLn4KCYy1rRRXKLSr:1ui673OfEqUbFERXt

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3588-2-0x00000000003D0000-0x0000000000B7B000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\3588-2-0x00000000003D0000-0x0000000000B7B000-memory.exe"
    1⤵
      PID:1692

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1692-0-0x0000000001230000-0x00000000019DB000-memory.dmp

            Filesize

            7.7MB