2ee1379e5f9d6e101feb10c82cc2476a6c96f5299d5c462f2bb40305a75e1157

Analysis

max time kernel
134s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
04-06-2024 19:02

Target

2024-06-04_9b6f83f98914fb8c4ec626a14abc37b1_avoslocker_revil.exe
Size

4.2MB
MD5

9b6f83f98914fb8c4ec626a14abc37b1
SHA1

56d1e9b6c9911e88c30bf456585eab3b6de30fe2
SHA256

2ee1379e5f9d6e101feb10c82cc2476a6c96f5299d5c462f2bb40305a75e1157
SHA512

67600699712e5cd4eaa08f5cad27a7824de2d2696a9ac41fec9ee70624eb98e2c71291fb8b5689ac957a80f331b6939f6e206c227b1af3453f848bfba232ef3d
SSDEEP

98304:oNO49SyS6MML/WXBi4Oawh3Jh+wLBcS5ZB7zHa6hjyDc:z417KvwhUAB7zHaKB

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3412	2024-06-04_9b6f83f98914fb8c4ec626a14abc37b1_avoslocker_revil.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-04_9b6f83f98914fb8c4ec626a14abc37b1_avoslocker_revil.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-04_9b6f83f98914fb8c4ec626a14abc37b1_avoslocker_revil.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3412