Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 15:11
Behavioral task
behavioral1
Sample
9a4651c4651f720f8c044e01b96cd6f2ebfced5327d7c968f210ead2bbb6a661.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9a4651c4651f720f8c044e01b96cd6f2ebfced5327d7c968f210ead2bbb6a661.exe
Resource
win10v2004-20240426-en
General
-
Target
9a4651c4651f720f8c044e01b96cd6f2ebfced5327d7c968f210ead2bbb6a661.exe
-
Size
6.3MB
-
MD5
7f427f94cf065a762cf9a75b97a4fc9b
-
SHA1
25a55e19072b34f8b1aac34227c775171ddb3d39
-
SHA256
9a4651c4651f720f8c044e01b96cd6f2ebfced5327d7c968f210ead2bbb6a661
-
SHA512
de0391d7ed2b1bc0f9682d7930bf889eb9c5e3cbc9425f5633975394d72b213638c5e2d8834fba8c111e36031eedd168eaa3ebbbdf03739227be4b684d9d60f3
-
SSDEEP
196608:2iQ6Zcj3BcxWqkfeupbFDbsvVWCQ6tesLIWr/OZ/TRDzW5d0h:pZ4RgWqkfe7vDt78RSdi
Malware Config
Signatures
-
Detects executables packed with Themida 1 IoCs
Processes:
resource yara_rule behavioral1/memory/2400-0-0x000000013F860000-0x000000014075E000-memory.dmp INDICATOR_EXE_Packed_Themida -
Processes:
resource yara_rule behavioral1/memory/2400-0-0x000000013F860000-0x000000014075E000-memory.dmp themida
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2400-0-0x000000013F860000-0x000000014075E000-memory.dmpFilesize
15.0MB