Resubmissions

22-07-2024 21:47

240722-1nbndazhkj 7

22-07-2024 21:46

240722-1mptlszcpg 7

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22-07-2024 21:47

General

  • Target

    RLoader.exe

  • Size

    3.4MB

  • MD5

    1df9e44494d101f7c2ac82a479441884

  • SHA1

    a944a9c81d31f8656c48b0ef1eb6029bc2d0c45b

  • SHA256

    d171c4cea9ed618964c54ac3c0ac888c641adceb43bac4c6273f07c4830cf94d

  • SHA512

    45341e55e44ca1e3bebae86191026fb24c2e927af0c0c1bb6acb5652b9c2662061914e9909e3696ec759447144f5b673f3082c49624fae92ee86b0bf5c1528a4

  • SSDEEP

    98304:+2W1ppjaMkY2Y8uI1cKF8K/o/0rDMiA0u+:w1NkPqISKFTo/MPru+

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\RLoader.exe
    "C:\Users\Admin\AppData\Local\Temp\RLoader.exe"
    1⤵
      PID:2084

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2084-1-0x000000013F670000-0x000000013FF79000-memory.dmp

      Filesize

      9.0MB

    • memory/2084-0-0x000000013F670000-0x000000013FF79000-memory.dmp

      Filesize

      9.0MB