Analysis
-
max time kernel
93s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26/07/2024, 10:27
General
-
Target
2024-07-26_19d3a2bdbd71a28c81cc1eab9e9561be_avoslocker.exe
-
Size
2.2MB
-
MD5
19d3a2bdbd71a28c81cc1eab9e9561be
-
SHA1
9993236cd9dec15355e7b5f092097a3ac03e2024
-
SHA256
f50ef3566d36d782083acfd1015569aca6f19c1f068ee34c11e093851926c3f7
-
SHA512
53fb8031115542a589556e3a4629f8461d699067f75727c410299c470b828973d2cc1cbd08ec66bf26c12ef492240bd61d1419924841e1f07ddca43671f3ab3c
-
SSDEEP
49152:PGe01VDoK9F73dQk1QqE85EboQplYD1KL9brsGg9eVWAk7vYLYCL/oFzIdo8HuOy:PGeiQcDt8YD1M9brc+EQyFzUo8HuOSc3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-26_19d3a2bdbd71a28c81cc1eab9e9561be_avoslocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-26_19d3a2bdbd71a28c81cc1eab9e9561be_avoslocker.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx