Overview

overview

3

Static

static

3

2024-09-19...il.exe

windows7-x64

3

2024-09-19...il.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2024, 06:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-09-19_3de67dc5c34815bfa34059411de1b5e3_avoslocker_qakbot_revil.exe

  • Size

    3.1MB

  • MD5

    3de67dc5c34815bfa34059411de1b5e3

  • SHA1

    8cc897c95bef762ca722794902ec3be72cf09d78

  • SHA256

    70b7304bc26be824e1b1d4cc95314bbe509d95fdca9c9e0d76cd4de4b135c3d2

  • SHA512

    9cab6d53a7c73d52def6b889e3acb48c56ed90d25f2986a0cfc490830faa7ecd76f1e8d1328a235fa28b1336d2e9aac55b00293da5787db1f903459831ebb383

  • SSDEEP

    49152:O+vAADaccslTCJHMdG6UDHTtXD8QdWJbatP2oUNa9mEhRZN1LIxzRt2vVyt+KRab:O+vSccAC+G17RT8QdWAkoU6mEA2vXtZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-09-19_3de67dc5c34815bfa34059411de1b5e3_avoslocker_qakbot_revil.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-09-19_3de67dc5c34815bfa34059411de1b5e3_avoslocker_qakbot_revil.exe"
    1⤵
      PID:2380

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2380-0-0x0000000000400000-0x0000000000797000-memory.dmp

      Filesize

      3.6MB

      Download

    • memory/2380-2-0x0000000000400000-0x0000000000797000-memory.dmp

      Filesize

      3.6MB

      Download