435e0102bc175f0d55ecd6f6bcd074dffa578bbb7723f39436a4bbb5b9b7f4a9

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/05/2024, 01:05

Target

2024-05-01_bcfe3b5e497f1b7f2363c666a6765490_avoslocker.exe
Size

3.5MB
MD5

bcfe3b5e497f1b7f2363c666a6765490
SHA1

66070283f91d79a83bf22d5ebcc362e8da2fda69
SHA256

435e0102bc175f0d55ecd6f6bcd074dffa578bbb7723f39436a4bbb5b9b7f4a9
SHA512

d41f973a01d1f6b05ce91f1acc7a87e71d6238fb880344801fe485cea44e25d05b19e9b68d5e978a80ac7fa7d44e4a73de720261db870378d4a4094b9c29639a
SSDEEP

98304:sNkxOBodeDZgtmgIm3z6N+LqtG/GfmeZQKHiFLOAkGkzdnEVomFHKnPR:sNkxhEZK/GfmpFLOyomFHKnPR

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3000	2024-05-01_bcfe3b5e497f1b7f2363c666a6765490_avoslocker.exe
3000	2024-05-01_bcfe3b5e497f1b7f2363c666a6765490_avoslocker.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-01_bcfe3b5e497f1b7f2363c666a6765490_avoslocker.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-01_bcfe3b5e497f1b7f2363c666a6765490_avoslocker.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3000