Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 03:47 UTC

General

  • Target

    4044-2-0x0000000000400000-0x0000000000C4C000-memory.exe

  • Size

    8.3MB

  • MD5

    64cf0c68c1813f2d73ff388f4b249fb0

  • SHA1

    327203afd75ce55369e9c8c8e65bf83a6da35aca

  • SHA256

    3af5b9a57b6c5a9a3b2fa2d88e9ce420de4ba666b5ad4f8641f45d491d58e1ad

  • SHA512

    92de320069470dbf979b2f1153735de5a285891f434b5b91f4d6f81aa6de8866dca01144d76e03fb88e4016c8c316a8e5f8f13bb6ec8e23f50e07b8a30353ab4

  • SSDEEP

    98304:dTCgpFzjE0Z3rs1QLWCGqEWN2fR6DcFacSuBP7Fd7v/yQttPOlYft3+4HCqMO6Oa:B/Fz40drwQLWCGqEZF1vRZUF4zMO6CR

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4044-2-0x0000000000400000-0x0000000000C4C000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\4044-2-0x0000000000400000-0x0000000000C4C000-memory.exe"
    1⤵
      PID:2368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2368-0-0x0000000000400000-0x0000000000C4C000-memory.dmp

      Filesize

      8.3MB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.