Overview
overview
10Static
static
7anyunlock-...1).exe
windows10-1703-x64
10$PLUGINSDI...Vs.dll
windows10-1703-x64
3$PLUGINSDI...ls.dll
windows10-1703-x64
3$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...up.exe
windows10-1703-x64
7$PLUGINSDI...ec.dll
windows10-1703-x64
3$PLUGINSDI...ss.dll
windows10-1703-x64
3$PLUGINSDIR/setup.exe
windows10-1703-x64
1$PLUGINSDI...ll.exe
windows10-1703-x64
7$PLUGINSDI...er.dll
windows10-1703-x64
3$PLUGINSDI...Vs.dll
windows10-1703-x64
3$PLUGINSDI...ib.dll
windows10-1703-x64
3$PLUGINSDI...el.dll
windows10-1703-x64
7$PLUGINSDI...tn.dll
windows10-1703-x64
3$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...gs.dll
windows10-1703-x64
3$PLUGINSDI...ss.dll
windows10-1703-x64
3$PLUGINSDI...ry.dll
windows10-1703-x64
3$PLUGINSDIR/un.exe
windows10-1703-x64
1Analysis
-
max time kernel
133s -
max time network
139s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
02-05-2024 07:28
Behavioral task
behavioral1
Sample
anyunlock-iphone-password-unlocker-en-official-setup (1).exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/CheckProVs.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SkinnedControls.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/dotNetFx45_Full_setup.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/setup.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/uninstall.exe
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/CheckProVs.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/GoogleTracingLib.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/SkinBtn.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/registry.dll
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/un.exe
Resource
win10-20240404-en
General
-
Target
$PLUGINSDIR/un.exe
-
Size
11.7MB
-
MD5
cbea93b5c3fc5080bb200c58edc14dd6
-
SHA1
4204117c82823c54dc5e3f05a4c1ff667fefb331
-
SHA256
ee8c4d17e67236e84faa12696aed1b4a8d5b529b73adc2a6b2787e26e96d191c
-
SHA512
2977e50a98ef9bb76f3f63a0909c6fbca0f08ceeb8d796c3c57364474736cb5d3a8803c32f6a6f7cc66c89129aead2e37c87369b96160bef6df6aff7a4171e8a
-
SSDEEP
196608:xKfCvvcESaXBiHaR+EKaIk6xbjkP6ISLdxI/7zvhbYrsCJnDN5PbXy8UO+O4WgDV:xKRWoHaRN5jNP6ISgzpErnD7bXy8h+OC
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1768 un.exe