General

  • Target

    Lockpick.iso

  • Size

    366.5MB

  • MD5

    999e828e0b309c615f12bd6f179a03cc

  • SHA1

    cd520bf68f377f747689e7b8bda1bc12641f3d58

  • SHA256

    9d1afc1d80b1f9fcb1ce530c292fb429e3e4e6e791ce5205019a2a233d1fd9dc

  • SHA512

    5d08cf109b7744f58ccc806ba79e480bc78964112c57f42aca21c94c2fc446370e37040123c2dca57841d066ba439a78600a854494e7af69cdeca9bdf402188c

  • SSDEEP

    6291456:F7SDiE55FvD9z9xkfQTAIhJrTeTgwcq0VwsVXIX:oFL9ZCfQTvrO7psIX

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • Lockpick.iso
    .iso
  • out.iso
    .iso
  • CDUsb.y
  • Programs/Lockpick/Lockpick.exe
    .exe windows:5 windows x86 arch:x86

    a0202d592d6536f8224dd058e0c34c93


    Headers

    Imports

    Sections

  • Programs/Lockpick/MInst.lgz
  • Programs/Lockpick/Portable/Scripts.txt
  • Programs/Lockpick/Portable/x64/ActivePasswordChanger_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/Bwp_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/FastBootDetect_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/OOStarting_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/PCUnlocker_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/PEPassPass_x64.exe
    .exe windows:5 windows x64 arch:x64

    1eb9071ddd5c2fb5179069f43f4aed99


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/PassReset_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/SQLServer_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Add-User.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Burn CD_DVD.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Burn-USB.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/BurnCD_DVD.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Buy-Now.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Free-Trail-.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Free-Trail.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Help.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Home.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/No.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/OK.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Reboot.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Register.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Register2.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Reset-Password.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/Yes.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/about_us.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/add_new.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/add_user-error.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/burn.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/close-icon-small.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/close.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/first_bg.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/format_usb.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/guest-not-protected.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/insert_dvd.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/insert_usb.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/isee.ico
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/logo.ico
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/menu.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/minimize.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/reboot_bg.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/register-successfully.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/register_bg.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/registration-fails.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/registration.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/restart.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/secbg.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/start_reset.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/PICTURE/system-errors.png
    .png
  • Programs/Lockpick/Portable/x64/UUKeys/UUKeysWindowsPasswordRecovery.exe
    .exe windows:4 windows x86 arch:x86

    df1a07b7beb995094ea674eb13e8e501


    Headers

    Imports

    Exports

    Sections

  • Programs/Lockpick/Portable/x64/UUKeys/config.ini
  • Programs/Lockpick/Portable/x64/UUKeys/reg.dat
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/MicInfo.dll
    .dll windows:5 windows x86 arch:x86

    46a8e2a1ede15b53918714f98be6d863


    Headers

    Imports

    Exports

    Sections

  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/Product Key Recovery.exe
    .exe windows:5 windows x86 arch:x86

    9ecf057d83224e3e1060bd9e92641815


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/SamUserInfo.dll
    .dll windows:4 windows x86 arch:x86

    ed3e57311f3eb9d2056bd90c45c927a7


    Headers

    Imports

    Exports

    Sections

  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/Windows Password Reset.exe
    .exe windows:5 windows x86 arch:x86

    08dec1f0f3e9e9b3672e005d2a333149


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/Success.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/button_Restart.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/button_Restart_later.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/button_cancel.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/button_close.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/button_no.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/button_ok.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/button_yes.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/error.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/key/button_close.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/key/button_min.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/key/key_bg.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/key/list_hearder.bmp
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/key/product_key_background.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/key/save.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/message_bottom.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/message_line.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/message_top.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/msg_title_icon.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/arrow.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_accounts.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_back.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_close.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_next.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_process.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_reboot.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_reset.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/button_windows.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/left_select_system.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/left_select_user.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/left_step.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/list_hearder.bmp
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/main_background.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/mark.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/right_background.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/right_background2.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/right_background3.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/right_background4.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/right_background_create_user.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/trake_slider.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/trake_slider02.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/unmark.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/user_image.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/password/windows_logo.png
    .png
  • Programs/Lockpick/Portable/x64/WBG_PasswordKeyRecovery/pic/warning.png
    .png
  • Programs/Lockpick/Portable/x64/WLU_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/ntpwedit_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/resethiberfil_x64.exe
    .exe windows:4 windows x64 arch:x64

    22e7125b95acf497b07e79559bdc556c


    Headers

    Imports

    Sections

  • Programs/Lockpick/Portable/x64/rwp_x64.exe
    .exe windows:4 windows x64 arch:x64

    ce92706925e359aa40f23197a9743843


    Headers

    Imports

    Sections

  • Programs/Lockpick/autorun.ico
  • Programs/Lockpick/autorun.inf
  • Programs/Lockpick/minst.About
  • Programs/Lockpick/minst.ini
  • Programs/Lockpick/minst.lng
  • Programs/Lockpick/minst.lng.1
  • autorun.inf
  • boot/bcd
  • boot/boot.sdi
  • boot/bootfix.bin
  • boot/bootsect.exe
    .exe windows:10 windows x64 arch:x64

    197b5f5cf02964bf07b3a72286de3102


    Code Sign

    Headers

    Imports

    Sections

  • boot/en-us/bootsect.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • boot/etfsboot.com
  • boot/fonts/chs_boot.ttf
  • boot/fonts/cht_boot.ttf
  • boot/fonts/jpn_boot.ttf
  • boot/fonts/kor_boot.ttf
  • boot/fonts/malgun_boot.ttf
  • boot/fonts/malgun_console.ttf
  • boot/fonts/malgunn_boot.ttf
  • boot/fonts/meiryo_boot.ttf
  • boot/fonts/meiryo_console.ttf
  • boot/fonts/meiryon_boot.ttf
  • boot/fonts/msjh_boot.ttf
  • boot/fonts/msjh_console.ttf
  • boot/fonts/msjhn_boot.ttf
  • boot/fonts/msyh_boot.ttf
  • boot/fonts/msyh_console.ttf
  • boot/fonts/msyhn_boot.ttf
  • boot/fonts/segmono_boot.ttf
  • boot/fonts/segoe_slboot.ttf
  • boot/fonts/segoen_slboot.ttf
  • boot/fonts/wgl4_boot.ttf
  • boot/memtest.exe
    .exe windows:0 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • boot/resources/bootres.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • boot/resources/bootres_hci.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • bootmgr
    .ps1
  • bootmgr.efi
    .exe windows:0 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • efi/boot/bootx64.efi
    .dll windows:0 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • efi/microsoft/boot/bcd
  • efi/microsoft/boot/cdboot.efi
    .dll windows:0 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • efi/microsoft/boot/cdboot_noprompt.efi
    .dll windows:0 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • efi/microsoft/boot/cipolicies/active/{5dac656c-21ad-4a02-ab49-649917162e70}.cip
  • efi/microsoft/boot/cipolicies/active/{82443e1e-8a39-4b4a-96a8-f40ddc00b9f3}.cip
  • efi/microsoft/boot/cipolicies/active/{cdd5cb55-db68-4d71-aa38-3df2b6473a52}.cip
  • efi/microsoft/boot/efisys.bin
  • efi/microsoft/boot/efisys_noprompt.bin
  • efi/microsoft/boot/fonts/chs_boot.ttf
  • efi/microsoft/boot/fonts/cht_boot.ttf
  • efi/microsoft/boot/fonts/jpn_boot.ttf
  • efi/microsoft/boot/fonts/kor_boot.ttf
  • efi/microsoft/boot/fonts/malgun_boot.ttf
  • efi/microsoft/boot/fonts/malgun_console.ttf
  • efi/microsoft/boot/fonts/malgunn_boot.ttf
  • efi/microsoft/boot/fonts/meiryo_boot.ttf
  • efi/microsoft/boot/fonts/meiryo_console.ttf
  • efi/microsoft/boot/fonts/meiryon_boot.ttf
  • efi/microsoft/boot/fonts/msjh_boot.ttf
  • efi/microsoft/boot/fonts/msjh_console.ttf
  • efi/microsoft/boot/fonts/msjhn_boot.ttf
  • efi/microsoft/boot/fonts/msyh_boot.ttf
  • efi/microsoft/boot/fonts/msyh_console.ttf
  • efi/microsoft/boot/fonts/msyhn_boot.ttf
  • efi/microsoft/boot/fonts/segmono_boot.ttf
  • efi/microsoft/boot/fonts/segoe_slboot.ttf
  • efi/microsoft/boot/fonts/segoen_slboot.ttf
  • efi/microsoft/boot/fonts/wgl4_boot.ttf
  • efi/microsoft/boot/memtest.efi
    .exe windows:0 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • efi/microsoft/boot/resources/bootres.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • efi/microsoft/boot/resources/bootres_hci.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • efi/microsoft/boot/winsipolicy.p7b
  • setup.exe
    .exe windows:10 windows x64 arch:x64

    53e890b302fb295dee13cc692158b6c5


    Code Sign

    Headers

    Imports

    Sections

  • sources/boot.wim