Analysis

  • max time kernel
    33s
  • max time network
    38s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/05/2024, 13:56

General

  • Target

    unpacked_GmloXpl6ivdM9LxS.exe

  • Size

    10.2MB

  • MD5

    ba02fd17add340403ca75b57487ea613

  • SHA1

    dad9303c14f41cb8e7f07816b86dd1a8956d4c40

  • SHA256

    a928dae69ed660eb6cdd2191e5074afe0a70ba6b5d945d8b12f731207255be65

  • SHA512

    5eca7f7b30d89abe298b36bb9c3df052c50221fd6b340eed3384b13d90b466c56e6f575d17f9231e3e1edb50357bbdcf3b3401269770598c26ba6f738ef2a8b1

  • SSDEEP

    98304:EMnBkMv0h0sSEcC4wSBsfcaE/rN8kEWuHI6WhzQMdrRCNyG54UA1T2vuz:3mMv0hjSfVskaE/r+keH94zddQkpQuz

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\unpacked_GmloXpl6ivdM9LxS.exe
    "C:\Users\Admin\AppData\Local\Temp\unpacked_GmloXpl6ivdM9LxS.exe"
    1⤵
      PID:3480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3480-0-0x00007FF75C1B0000-0x00007FF75CBED000-memory.dmp

      Filesize

      10.2MB

    • memory/3480-1-0x00007FF75C1B0000-0x00007FF75CBED000-memory.dmp

      Filesize

      10.2MB