18154a1852f9b2abc5cea484943de37986b356ee6f35d8f4735b08c1d8f5c53c

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 22:27

Target
2024-06-02_ec5d52b322f62cc37014cf1ccf601c6c_avoslocker_revil.exe
Size 4.2MB
Sample240602-2c9lpsad45
SHA256 18154a1852f9b2abc5cea484943de37986b356ee6f35d8f4735b08c1d8f5c53c
MD5 ec5d52b322f62cc37014cf1ccf601c6c
SHA1 a2128f549af90646a800b048dc1342e070788dde
SHA512 ca512b8d06e7f13ded8b4e4dc4f4a73f6fea810cd2a27e368fa841a05227c71fb721a9e9a5aa0fe805feaa351e19deaef626b33a0a9710478c082e8ef930d30a
SSDEEP 98304:pNO49SyS6MML/WXBi4Oawh3Jh+wLBcS5ZB7zHa6hjyDc:S417KvwhUAB7zHaKB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4476	2024-06-02_ec5d52b322f62cc37014cf1ccf601c6c_avoslocker_revil.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-02_ec5d52b322f62cc37014cf1ccf601c6c_avoslocker_revil.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-02_ec5d52b322f62cc37014cf1ccf601c6c_avoslocker_revil.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4476