Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 00:46
Behavioral task
behavioral1
Sample
91b15448cc5d59b9b58e89726a86752857d8e58bbdb38148895b38beb9deb86f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91b15448cc5d59b9b58e89726a86752857d8e58bbdb38148895b38beb9deb86f.exe
Resource
win10v2004-20240426-en
General
-
Target
91b15448cc5d59b9b58e89726a86752857d8e58bbdb38148895b38beb9deb86f.exe
-
Size
6.3MB
-
MD5
1b626a5cb27acc6e97c0cdc7dd3d3c85
-
SHA1
00ce41c21695f3c2f0b25f3341ba8a47be2142fb
-
SHA256
91b15448cc5d59b9b58e89726a86752857d8e58bbdb38148895b38beb9deb86f
-
SHA512
6bc55e5a7266c2f96e56a8a7fb440317d58c08e8a13b1ce73706aaede60018a59c493e7554fa000230fb146b5e8b664b9d7d5de57346ed08ccde8faaa9a216c0
-
SSDEEP
98304:SZHnudSjefElXcCONamsoFttBGzt+fGkoPHFOPSDjMIC+tt3lgUrJQYSpXPzaT3t:COi8cmnip+mPE2HlgmkXoar/54F
Malware Config
Signatures
-
Detects executables packed with Themida 2 IoCs
resource yara_rule behavioral1/memory/2904-0-0x0000000000400000-0x00000000012A3000-memory.dmp INDICATOR_EXE_Packed_Themida behavioral1/memory/2904-1-0x0000000000400000-0x00000000012A3000-memory.dmp INDICATOR_EXE_Packed_Themida -
resource yara_rule behavioral1/memory/2904-0-0x0000000000400000-0x00000000012A3000-memory.dmp themida behavioral1/memory/2904-1-0x0000000000400000-0x00000000012A3000-memory.dmp themida