Analysis
-
max time kernel
93s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-08-2024 08:00
General
-
Target
2024-08-06_c226fe7293e39962dc19ded9f62962ad_avoslocker_qakbot.exe
-
Size
6.0MB
-
MD5
c226fe7293e39962dc19ded9f62962ad
-
SHA1
09dd7bbddaaf95e2860a3639da21ed2283b9ffdb
-
SHA256
7c245bf5112311fe78912924e817c6c20a639c69608ba6a1bb80378c4dd993bc
-
SHA512
abb6a17f2c691a876312a30942e1b05df9054e91e10011bda44447d90a1c104def8996ffdcef0a9320194b623577592ea6561cbad14d10c5445fcaa1fe24bc51
-
SSDEEP
98304:psqMY5IyHtUh/4EkMP1WJ57VpVY2Gus3sKbmCslHldlvwnTCaCWRq:psq36EtUhqMP1WJ5BpK28IHldlICaC8q
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-06_c226fe7293e39962dc19ded9f62962ad_avoslocker_qakbot.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-06_c226fe7293e39962dc19ded9f62962ad_avoslocker_qakbot.exe"1⤵
- System Location Discovery: System Language Discovery