Analysis

  • max time kernel
    0s
  • max time network
    10s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07-01-2025 19:02

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\Hexium\Themes\EFI\bootmgr.exe command="C:\Users\Admin\AppData\Local\Temp\Hexium\Themes\EFI\bootmgr.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Hexium\Themes\EFI Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    Hexium/Themes/EFI/bootmgr.exe

  • Size

    1.5MB

  • MD5

    4c75682f8c4ddf9ca2f68ba84c3bf240

  • SHA1

    9c2885ce2d27a58e1d1de94e41e62bd018e9e7fd

  • SHA256

    1db270a00b34ba940494dbafd57ec0ac04219793fc39a76932b9d822c3fdd31b

  • SHA512

    11c4de2672c7706cc6df63e6e1b86c3f0a7ff59b4e0bb7006a86c7a805bccc926ff7f2ca96c3b495aae71f5dcb80e6ce9129deb735b66e6a9d763a2ebbb26c5c

  • SSDEEP

    24576:eoIToUvwWWaI8p+uWReoyu+Qn8EPPmwr6hqFO+RMnact:DPSQbyuLf3mxqsnaI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Hexium\Themes\EFI\bootmgr.exe
    "C:\Users\Admin\AppData\Local\Temp\Hexium\Themes\EFI\bootmgr.exe"
    1⤵
      PID:2692

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads