Analysis

  • max time kernel
    14s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    27/08/2024, 16:20 UTC

General

  • Target

    2264-2-0x00000000002D0000-0x00000000008F4000-memory.exe

  • Size

    6.1MB

  • MD5

    adebbdb3a066581887b84baa4fb655bc

  • SHA1

    6e1c87f3909196bb85d89910fdb225c934b948aa

  • SHA256

    066e8014c8b08a795a2fa05a95673b8e9f10dcdd25f0cec9a1f66585b55eb8a7

  • SHA512

    8ba70b0c32bf1dee22d6c60fa32884a18c8b8123cdc073d88595d5a0f50dae3f995b0b80b8d370dead83162734763d6bdd3387bf621f94b8b00a0fce69ff1199

  • SSDEEP

    98304:hTCgpFzjE0Z3rs1QLWCG8MFtH6yxtmsarnUEFOluUtLuxxO9yue:t/Fz40drwQLWCGH0UEFUFtqU

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2264-2-0x00000000002D0000-0x00000000008F4000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2264-2-0x00000000002D0000-0x00000000008F4000-memory.exe"
    1⤵
      PID:1668

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1668-0-0x00000000002D0000-0x00000000008F4000-memory.dmp

      Filesize

      6.1MB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.