Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2024 17:38

General

  • Target

    44ee774672dce49afed35ec1975235efca8905c83a17a1137b633ba13035efec.exe

  • Size

    3.8MB

  • MD5

    b3d870d1e36c141f27757dacc3b7f3ee

  • SHA1

    1398db487a08124602026d309feff70423ab5c1c

  • SHA256

    44ee774672dce49afed35ec1975235efca8905c83a17a1137b633ba13035efec

  • SHA512

    fc119f13d4198323fd96dbfc917cb4d430b3df08f3d643a77ba3612968bded3a2becdaf9a34c369eaf2186a7517b17f5da889a935ed3a8204a9fb20f7c7f68ac

  • SSDEEP

    98304:E63+06xjfnNHQAB2W+WRV/6DKbO4kxVNNL3stBOKo:E6nq+XW+ApbO4+cvOKo

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\44ee774672dce49afed35ec1975235efca8905c83a17a1137b633ba13035efec.exe
    "C:\Users\Admin\AppData\Local\Temp\44ee774672dce49afed35ec1975235efca8905c83a17a1137b633ba13035efec.exe"
    1⤵
      PID:1852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1852-0-0x0000000010900000-0x00000000111F0000-memory.dmp

      Filesize

      8.9MB

    • memory/1852-1-0x0000000010900000-0x00000000111F0000-memory.dmp

      Filesize

      8.9MB