Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    18/10/2024, 01:44

General

  • Target

    a9b656c17a9d3a0570379b610cf401b3943b56d24b058e06d7069c50c9a72bc2.exe

  • Size

    5.9MB

  • MD5

    b7ac2f768c7bb77ab0b9400202c3f36f

  • SHA1

    82d5e1f755589c7281112451a141b46d12222918

  • SHA256

    a9b656c17a9d3a0570379b610cf401b3943b56d24b058e06d7069c50c9a72bc2

  • SHA512

    fed4fde71b9371e3cfb126d3cefec51e9eda6850c1efb46ab845a33c525b8a9eb82107d5ac9526c8d93aeb18aeda659178caad2c18cdb77abf39ee3bf79b57ad

  • SSDEEP

    98304:SXw3mWbc4g+l9W8+LUbD2eyLyT+OzzAeimmHyFvLgSBXJygEqD5:sw2gzgY9X7P2e1TVBiARLvXREqD5

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a9b656c17a9d3a0570379b610cf401b3943b56d24b058e06d7069c50c9a72bc2.exe
    "C:\Users\Admin\AppData\Local\Temp\a9b656c17a9d3a0570379b610cf401b3943b56d24b058e06d7069c50c9a72bc2.exe"
    1⤵
      PID:2880

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2880-0-0x0000000000400000-0x00000000011C2000-memory.dmp

      Filesize

      13.8MB

    • memory/2880-1-0x0000000000400000-0x00000000011C2000-memory.dmp

      Filesize

      13.8MB