Analysis

  • max time kernel
    99s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 00:33

General

  • Target

    2024-05-23_3fa4e44540dfc91f042fe1c4fdc210af_avoslocker.exe

  • Size

    5.3MB

  • MD5

    3fa4e44540dfc91f042fe1c4fdc210af

  • SHA1

    209c783115e0e93594524cebbd1554fbca2ceb15

  • SHA256

    5a8aaed11908cccbee2b2eed0b4eed11412edb052b73461898fa30d8c6ddeacd

  • SHA512

    801371be7d66465341914a86140a26c4ffd88b4300c832eee0e6e15a17dec3c456620c4158dddb03fcfbf8561be9677f2fe90282ab496e45a12d944fe620cdf1

  • SSDEEP

    98304:LVrv78HEFfNHX5rpiD0BTa3aLkBo6DjD7d/TLCQlv:LwEFfHp7B2NDjD7d3CQ1

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-23_3fa4e44540dfc91f042fe1c4fdc210af_avoslocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-23_3fa4e44540dfc91f042fe1c4fdc210af_avoslocker.exe"
    1⤵
    • Drops file in Program Files directory
    PID:1212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe

    Filesize

    5.3MB

    MD5

    3fa4e44540dfc91f042fe1c4fdc210af

    SHA1

    209c783115e0e93594524cebbd1554fbca2ceb15

    SHA256

    5a8aaed11908cccbee2b2eed0b4eed11412edb052b73461898fa30d8c6ddeacd

    SHA512

    801371be7d66465341914a86140a26c4ffd88b4300c832eee0e6e15a17dec3c456620c4158dddb03fcfbf8561be9677f2fe90282ab496e45a12d944fe620cdf1

  • memory/1212-0-0x000000007495E000-0x000000007495F000-memory.dmp

    Filesize

    4KB

  • memory/1212-1-0x0000000000990000-0x0000000000998000-memory.dmp

    Filesize

    32KB

  • memory/1212-2-0x00000000058A0000-0x0000000005E44000-memory.dmp

    Filesize

    5.6MB

  • memory/1212-3-0x0000000005240000-0x00000000052D2000-memory.dmp

    Filesize

    584KB

  • memory/1212-5-0x00000000053F0000-0x00000000053FA000-memory.dmp

    Filesize

    40KB

  • memory/1212-4-0x0000000074950000-0x0000000075100000-memory.dmp

    Filesize

    7.7MB

  • memory/1212-3083-0x000000007495E000-0x000000007495F000-memory.dmp

    Filesize

    4KB

  • memory/1212-3666-0x0000000074950000-0x0000000075100000-memory.dmp

    Filesize

    7.7MB