7ac82aa16ab393e6dea0ef5936c377faceb0908f4ad82ee993196791c016b783

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 16:20

Target
SeroLocker.exe
Size 234KB
Sample260822-ttd75a1vav
SHA256 7ac82aa16ab393e6dea0ef5936c377faceb0908f4ad82ee993196791c016b783
MD5 229d9a946f8f300be9d8f8c79b14e79e
SHA1 d2d554e668f7d592540051eeb7e900ba4ef02741
SHA512 1b6a643be8b4bc6093c21d12500c22dc99f6374d50ba0cc0db2c05a85548dea7d435340555c542e1818a1ca2b534e9b04bb9000bdb4f2051c6a62db823ee5322
SSDEEP 3072:n9iLPa8zr3E56+mM93V/3klhQZctLzv183aNAgeKbg1fDuhEThBssQSvqmdutyBD:n9I/+93k/IcHtRY1fDV1AyB
TLSH
T11B347D19B7A81CF9E57B8178C8424906DA72BC534BA1E7CF13E04A979F236D09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4804 wrote to memory of 5164	4804	SeroLocker.exe	88

C:\Users\Admin\AppData\Local\Temp\SeroLocker.exe
"C:\Users\Admin\AppData\Local\Temp\SeroLocker.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4804
- C:\Windows\System32\notepad.exe
  "C:\Windows\System32\notepad.exe"
  2⤵
  PID:5164