Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
03/07/2024, 23:25
General
-
Target
2024-07-03_6dc7f7bb0f1dcde745607e69ada03e1f_avoslocker.exe
-
Size
1.3MB
-
MD5
6dc7f7bb0f1dcde745607e69ada03e1f
-
SHA1
e144c90ef036d6bfc20adfa2eff94fc9bc897414
-
SHA256
47c60f52e3819146db41707d2b01ec53cd0330bca32a2192b11146b98d446323
-
SHA512
7d55e65089c7144d0e58b95d9741992ac4d089984dba053f444df61bcea04af8fbfb7bf984142af6bae4f57498760c28862d89b6e238486a7c4635ace410d752
-
SSDEEP
24576:w2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedp2JOt934J7Z6bQaj1BvUm9J:wPtjtQiIhUyQd1SkFdkJE3jM2ce
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Drops file in Program Files directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-03_6dc7f7bb0f1dcde745607e69ada03e1f_avoslocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-03_6dc7f7bb0f1dcde745607e69ada03e1f_avoslocker.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.3MB