075e16e48184e7d7f274ac7c8d7ff4c414844cc46b164fe7341aa38538653f1f

Analysis

max time kernel
93s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
26/07/2024, 23:08

Target

075e16e48184e7d7f274ac7c8d7ff4c414844cc46b164fe7341aa38538653f1f.exe
Size

2.5MB
MD5

3e40c0169cf9cdadb9d3c0bd53a0ec6c
SHA1

aa2775bb08707961141eb4a941851859df3fe08c
SHA256

075e16e48184e7d7f274ac7c8d7ff4c414844cc46b164fe7341aa38538653f1f
SHA512

bf08c84b79529ecb6c871031ba9da45b39534da2d1937dc0f57ed6ad4eb3530081268d78668a80f07a3e8a8122366b924d9fc78a22d5ba4992a9cda700a26c48
SSDEEP

12288:AHfSe/YwjSFe5fEr7Lv5D91zGGgePNDKyhQtjWZh3r/TSz7cUOKqxoUihp4B/B:AHfSebjeAfEr7Lv5D91zGmUArg7aMp

Score

7^/10

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
behavioral2/memory/1612-1-0x0000022A485A0000-0x0000022A4881A000-memory.dmp	net_reactor

C:\Users\Admin\AppData\Local\Temp\075e16e48184e7d7f274ac7c8d7ff4c414844cc46b164fe7341aa38538653f1f.exe
"C:\Users\Admin\AppData\Local\Temp\075e16e48184e7d7f274ac7c8d7ff4c414844cc46b164fe7341aa38538653f1f.exe"
1⤵
PID:1612

memory/1612-0-0x00007FFCEEAE3000-0x00007FFCEEAE5000-memory.dmp

Filesize
8KB

Download
memory/1612-1-0x0000022A485A0000-0x0000022A4881A000-memory.dmp

Filesize
2.5MB

Download
memory/1612-4-0x00007FFCEEAE0000-0x00007FFCEF5A1000-memory.dmp

Filesize
10.8MB

Download
memory/1612-5-0x00007FFCEEAE0000-0x00007FFCEF5A1000-memory.dmp

Filesize
10.8MB

Download