59776511dc3a5d9922bf774227b8b9c641753f2c2652e26a4be687276ca59a50 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
29/08/2024, 01:47

Sharing

Report Analysis Logs

General

Target

9a07d2cea2c4e4973d21023d41696f50N.exe
Size

3.3MB
MD5

9a07d2cea2c4e4973d21023d41696f50
SHA1

07a1d6254d016b3b45abc04fa88589a0e0fb5bfd
SHA256

59776511dc3a5d9922bf774227b8b9c641753f2c2652e26a4be687276ca59a50
SHA512

fbf71ae48461648c4ab95cce381470cb3c052bb4ba2cdc4863f5a08c867363a340fea6bbf223d13ba9772eb8d99e38f0113614ba5a92e30e6bde555f4f2fa3ea
SSDEEP

98304:i6kxpS3cJMaBHSKBFtBpi4FUPdiW8+ZLEx:i6krS3U19FtBj45Zgx

Score

7^/10

themida

Malware Config

Signatures

Themida packer 2 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
behavioral1/memory/1952-1-0x000000013F2D0000-0x000000013FB82000-memory.dmp	themida
behavioral1/memory/1952-0-0x000000013F2D0000-0x000000013FB82000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\9a07d2cea2c4e4973d21023d41696f50N.exe
"C:\Users\Admin\AppData\Local\Temp\9a07d2cea2c4e4973d21023d41696f50N.exe"
1⤵
PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1952-1-0x000000013F2D0000-0x000000013FB82000-memory.dmp

Filesize
8.7MB

Download
memory/1952-0-0x000000013F2D0000-0x000000013FB82000-memory.dmp

Filesize
8.7MB

Download