ab4e4f450aaada8daf95e2a6a7ba04b7033623decb8f61f86f527fc24d3d7f1e

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
08-06-2024 02:37

Target

2024-06-08_30bc02f5366cbf35f130be23a1e5ce30_avoslocker_qakbot.exe
Size

1.3MB
MD5

30bc02f5366cbf35f130be23a1e5ce30
SHA1

387c9a1398074d383c804eabab8c49c7dd26b543
SHA256

ab4e4f450aaada8daf95e2a6a7ba04b7033623decb8f61f86f527fc24d3d7f1e
SHA512

4ae94476cd7c88676cf2df3a54ac66a34ca68efb5048b1ae29e4fceffcf8a5bc3f8a5c8571156f4ee567e71b3c3112ddbf7f3e446db8ef96f8ecd44ac84dda07
SSDEEP

24576:RPIDPZc0w1mspS5Xa4vfyjO3OApKHzMcf7fQCLRkgEx/:RPIrOXpSxNvfyS3OpHzMWQCLG/

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2884	2024-06-08_30bc02f5366cbf35f130be23a1e5ce30_avoslocker_qakbot.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-08_30bc02f5366cbf35f130be23a1e5ce30_avoslocker_qakbot.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-08_30bc02f5366cbf35f130be23a1e5ce30_avoslocker_qakbot.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2884