8cfd962982014258c084daa77f801322b0b2a6bdb5fb0394605b2043f49ffb91 | Triage

Resubmissions

30/03/2025, 21:03

250330-zvz4waw1e1 7

30/03/2025, 21:02

250330-zvl71sw1ew 7

Analysis

max time kernel
0s
max time network
3s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
30/03/2025, 21:02

Sharing

Report Analysis Logs

General

Target

BsW8ClNkDvW9QNk8Gp6JMK.exe
Size

5.2MB
MD5

dc8dd738191dd7e258ebf6b7f0bef1a5
SHA1

356eb9e009601a95eb212f9bf009fd39a5f3fa72
SHA256

8cfd962982014258c084daa77f801322b0b2a6bdb5fb0394605b2043f49ffb91
SHA512

7a9021debb6a1222be53c8d6971a26566dadf579b229624e4b92e756dd127278414251708cd28f470e419eb1920dbc48af3accbee63dd71ba14927a8fd989478
SSDEEP

98304:jkfOWkdppOZpKRy1qw0DbrG0SQj1otR8Jc4s14Srv1pjDb:juk4fKbvrRSu1wug1Hrv1pnb

Score

7^/10

themida

Malware Config

Signatures

Themida packer 2 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
behavioral1/memory/2728-1-0x000000013F390000-0x0000000140022000-memory.dmp	themida
behavioral1/memory/2728-0-0x000000013F390000-0x0000000140022000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\BsW8ClNkDvW9QNk8Gp6JMK.exe
"C:\Users\Admin\AppData\Local\Temp\BsW8ClNkDvW9QNk8Gp6JMK.exe"
1⤵
PID:2728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2728-1-0x000000013F390000-0x0000000140022000-memory.dmp

Filesize
12.6MB

Download
memory/2728-0-0x000000013F390000-0x0000000140022000-memory.dmp

Filesize
12.6MB

Download