Analysis

  • max time kernel
    15s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    02-08-2024 08:56

General

  • Target

    80f0afbaff666add59216f89cab20980N.exe

  • Size

    3.5MB

  • MD5

    80f0afbaff666add59216f89cab20980

  • SHA1

    6022b8f921f5a02d57af8645d3d26350113d3e0f

  • SHA256

    fb26f535c1be4127698380a5f8cdfd1fc404af3c9efd1f6d1d38e96e06520580

  • SHA512

    bff7efecd7b16ea42b95d50329460ade624c6b2d58e870ffad667111dfcdbf04b6d0f661a30774602ceed9a90992b69253d46ef8bfec73db2faba8f036709790

  • SSDEEP

    98304:Z3thqw4QRmFLH+WlDq7wLh9domj4JHzqUDGLF4UGL:Z3thbVReLHBq70TybDGeL

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\80f0afbaff666add59216f89cab20980N.exe
    "C:\Users\Admin\AppData\Local\Temp\80f0afbaff666add59216f89cab20980N.exe"
    1⤵
      PID:2356

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2356-1-0x0000000140000000-0x0000000140992000-memory.dmp

      Filesize

      9.6MB

    • memory/2356-0-0x0000000140000000-0x0000000140992000-memory.dmp

      Filesize

      9.6MB