Analysis
- user interaction
yes - max time kernel
33s - max time network
34s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
26/04/2026, 04:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe
Resource
win10ltsc2021-20260130-en
2 signatures
150 seconds
General
- Target zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe
- Size 398KB
- Sample260426-eqft8aey7n
- SHA256 d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa
- MD5 bd0a3c308a6d3372817a474b7c653097
- SHA1 5ed36132872be3d5d94627b89f15a7369f68fba1
- SHA512 86c53974da682c9e55a181cacc3ba19a9bfd8df488c536c175695f28f79bb586722f4d6b061aaceb9d0db91996dd0a7e288f413c7d2562fbc5b6a305f747368f
- SSDEEP 6144:tYcn3ge+gqzsSALff2TRLz1lTl8TFPUW+8sSZJMidVmXmVcXHU:ttQe+PzsfX2Tpz1daaWnVIgcE
- TLSH T12684CF59B680D121C879437494A349483331AC3FA6829617B9757F2F3DFF3CA672BA06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 2 IoCs
description ioc Process File opened for modification C:\Windows\assembly\Desktop.ini zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe File created C:\Windows\assembly\Desktop.ini zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe - Drops file in Windows directory 3 IoCs
description ioc Process File created C:\Windows\assembly\Desktop.ini zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe File opened for modification C:\Windows\assembly\Desktop.ini zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe File opened for modification C:\Windows\assembly zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe"C:\Users\Admin\AppData\Local\Temp\zerolocker_d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa.exe"1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
PID:4488