bf36b009f7b716df32092b0cdcf85a7b786d533d6ac6d230f51b8683761cb747 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
23-11-2024 14:56

Sharing

Report Analysis Logs

General

Target

gZB8fHi8cMYTBT.exe
Size

15.6MB
MD5

9b8408054a1ab5f2b94f61e53cd49873
SHA1

555fb6d4fabcddb7bb1c1797b658963aa030bbef
SHA256

bf36b009f7b716df32092b0cdcf85a7b786d533d6ac6d230f51b8683761cb747
SHA512

505f1733dc55241c5569f57a4ba913f1a55d5d3889176d02c16f4fabacb750660e8b0d570db675a1d930dbf5b6bb4bb9a3f14c799d385fb5419b5126bbccb110
SSDEEP

393216:tKOPqg/oPgWQTdIMnmjw6KYwqQ4Q3mY641:tFPEPgWwdIoFxVqQ4MtR

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

Processes:

resource	yara_rule
behavioral1/memory/2092-1-0x000000013FE80000-0x0000000142090000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\gZB8fHi8cMYTBT.exe
"C:\Users\Admin\AppData\Local\Temp\gZB8fHi8cMYTBT.exe"
1⤵
PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2092-1-0x000000013FE80000-0x0000000142090000-memory.dmp

Filesize
34.1MB

Download
memory/2092-2-0x000000013FE80000-0x0000000142090000-memory.dmp

Filesize
34.1MB

Download