Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
27-05-2024 04:34
General
-
Target
2024-05-27_5f4c10ced32be40098045cfc3cf28a5c_avoslocker.exe
-
Size
1.3MB
-
MD5
5f4c10ced32be40098045cfc3cf28a5c
-
SHA1
973bb0c018e09916f6d33c58aa62d9040d41824f
-
SHA256
619d7d7a66459cf6a3665f3c963e8c6234d532464ddbebbdf7fdba914bfe5977
-
SHA512
e11772e96eaa65929ef5127c61b00017092d7d5b56ea3f1c24834a4b5fdd41cf4f59a591cfaaef1f15e52fa4797fd94a83be25363253a572fd354cb006f03213
-
SSDEEP
24576:P2zEYytjjqNSlhvpfQiIhKPtehfQ6r9qySkbgedXYbju+e9qii4Fznpo8DjAg+3g:PPtjtQiIhUyQs1SkFdie9qOjp7DjA7g0
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Drops file in Program Files directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-27_5f4c10ced32be40098045cfc3cf28a5c_avoslocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-27_5f4c10ced32be40098045cfc3cf28a5c_avoslocker.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.3MB