Analysis

  • max time kernel
    94s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-09-2024 07:13

General

  • Target

    TickleTweaks.exe

  • Size

    17.5MB

  • MD5

    f6cff5d65a01873eb2a79c816cf586e0

  • SHA1

    3a8bc9ac9b4b6a37b521275ad7d54e3459f179e9

  • SHA256

    0f3ccef9fc19cd2c578ba52dfa31286ef39736de5dda259ef47f5a4cd56cd353

  • SHA512

    b72d16f896ef6d8cfa9a0b34be7120d12c34c20eaf25a8780dfbed3efd3271b0f8c5a2d590bafa9c394d38f4360510fd71e9abf88a775157793ed77ed2bd6996

  • SSDEEP

    393216:dl/lsTpJsrAGM9zv8D9UAEJ9oNd+kpa37uLiDBj+hg0:RsDejMh8D5EJGgqwghN

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\TickleTweaks.exe
    "C:\Users\Admin\AppData\Local\Temp\TickleTweaks.exe"
    1⤵
      PID:852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/852-0-0x0000000140000000-0x0000000142541000-memory.dmp

      Filesize

      37.3MB

    • memory/852-1-0x0000000140000000-0x0000000142541000-memory.dmp

      Filesize

      37.3MB