Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
08-06-2024 02:37
General
-
Target
2024-06-08_30bc02f5366cbf35f130be23a1e5ce30_avoslocker_qakbot.exe
-
Size
1.3MB
-
MD5
30bc02f5366cbf35f130be23a1e5ce30
-
SHA1
387c9a1398074d383c804eabab8c49c7dd26b543
-
SHA256
ab4e4f450aaada8daf95e2a6a7ba04b7033623decb8f61f86f527fc24d3d7f1e
-
SHA512
4ae94476cd7c88676cf2df3a54ac66a34ca68efb5048b1ae29e4fceffcf8a5bc3f8a5c8571156f4ee567e71b3c3112ddbf7f3e446db8ef96f8ecd44ac84dda07
-
SSDEEP
24576:RPIDPZc0w1mspS5Xa4vfyjO3OApKHzMcf7fQCLRkgEx/:RPIrOXpSxNvfyS3OpHzMWQCLG/
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-08_30bc02f5366cbf35f130be23a1e5ce30_avoslocker_qakbot.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-08_30bc02f5366cbf35f130be23a1e5ce30_avoslocker_qakbot.exe"1⤵
- Suspicious behavior: EnumeratesProcesses