43344da2c150905e1d24bf7f4a3dfa5fbdaea54fa33b5a2e05ea7db8c209e7c3

Analysis

max time kernel
68s
max time network
68s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 08:44

Target
SeroLocker.exe
Size 234KB
Sample260823-km58lafn21
SHA256 43344da2c150905e1d24bf7f4a3dfa5fbdaea54fa33b5a2e05ea7db8c209e7c3
MD5 3c38ad63097cbc8b0ff8b235fb688790
SHA1 26efcc38ab220ff1e03c2a3215d9331dea2b58af
SHA512 7d523dfb94a6553743b039733ee08da6296b0a1445e10acbf46585a188aa0903c91ca4698090ceb02cc1389bb2231a01f68015c50578c1e21bf0f6c306f87382
SSDEEP 3072:c+dwo7t7woPnxQst0Q088UOnYqCwW+8zv7rApdCvkj8ZemYOt6YT4+srPPTa0PJQ:xnlS88UOnjJWz7rAQY8LYjxmL
TLSH
T142346C59B7A41CF9E577C139CD424906DB72BC5647A0E6CF13900AA68F237D09E3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5088 wrote to memory of 3544	5088	SeroLocker.exe	88

C:\Users\Admin\AppData\Local\Temp\SeroLocker.exe
"C:\Users\Admin\AppData\Local\Temp\SeroLocker.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5088
- C:\Windows\SYSTEM32\notepad.exe
  notepad.exe
  2⤵
  PID:3544