97f944433dc7e630b59d69dfa20ec95a99e74c680a60692814e0aada7af2d86d

Analysis

max time kernel
139s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:36

Target

2024-05-22_33ce0a6ed56fd0c6f9194ad90d72bfec_avoslocker.exe
Size

1.4MB
MD5

33ce0a6ed56fd0c6f9194ad90d72bfec
SHA1

d7f3e5a54d17c0c399455a8a214139006aee2c1a
SHA256

97f944433dc7e630b59d69dfa20ec95a99e74c680a60692814e0aada7af2d86d
SHA512

55694cc416a4ec4d547ed16202330d025d6d9899de284e0fedeca2816dc3a2c0624c8010d2d55f76b255882a3644615fff642398bbd6781aecb9fb5a138d8f28
SSDEEP

24576:gc9+tEZK31m7Z5AYZCHq7roPGSS+RlHUbm58KB:gMoYZCHoSS+RJUbY

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

2024-05-22_33ce0a6ed56fd0c6f9194ad90d72bfec_avoslocker.exe

pid process

3420 2024-05-22_33ce0a6ed56fd0c6f9194ad90d72bfec_avoslocker.exe

pid	process
3420	2024-05-22_33ce0a6ed56fd0c6f9194ad90d72bfec_avoslocker.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-22_33ce0a6ed56fd0c6f9194ad90d72bfec_avoslocker.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-22_33ce0a6ed56fd0c6f9194ad90d72bfec_avoslocker.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3420