Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
7anyunlock-...1).exe
windows10-1703-x64
10$PLUGINSDI...Vs.dll
windows10-1703-x64
3$PLUGINSDI...ls.dll
windows10-1703-x64
3$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...up.exe
windows10-1703-x64
7$PLUGINSDI...ec.dll
windows10-1703-x64
3$PLUGINSDI...ss.dll
windows10-1703-x64
3$PLUGINSDIR/setup.exe
windows10-1703-x64
1$PLUGINSDI...ll.exe
windows10-1703-x64
7$PLUGINSDI...er.dll
windows10-1703-x64
3$PLUGINSDI...Vs.dll
windows10-1703-x64
3$PLUGINSDI...ib.dll
windows10-1703-x64
3$PLUGINSDI...el.dll
windows10-1703-x64
7$PLUGINSDI...tn.dll
windows10-1703-x64
3$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...gs.dll
windows10-1703-x64
3$PLUGINSDI...ss.dll
windows10-1703-x64
3$PLUGINSDI...ry.dll
windows10-1703-x64
3$PLUGINSDIR/un.exe
windows10-1703-x64
1Analysis
-
max time kernel
133s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
02/05/2024, 07:28
Behavioral task
behavioral1
Sample
anyunlock-iphone-password-unlocker-en-official-setup (1).exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/CheckProVs.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SkinnedControls.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/dotNetFx45_Full_setup.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/setup.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/uninstall.exe
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/CheckProVs.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/GoogleTracingLib.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/SelfDel.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/SkinBtn.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/registry.dll
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/un.exe
Resource
win10-20240404-en
General
-
Target
$PLUGINSDIR/setup.exe
-
Size
3.3MB
-
MD5
023dfce70301896fb6b2e15eca718549
-
SHA1
64bf799250c2d437b8dd2f0c7c7e6509394565d9
-
SHA256
9140755badab25fcca359fe83f74a4a435ec6136302ddafb489a90f563ad4157
-
SHA512
e47fbb80e62a02018ffd0484e21d9f80bd6469ef0df745d7f5aff7bc5ca91a487bbbcdc2d0a9b0c67352a33c97bced3f0184ba42960f1cf7c6313004fbf4eede
-
SSDEEP
98304:lR41UPttYZbwA2PNb8XxD3GH5X3ng8SCC6akRuLy:M1eY3xbGZXXg8SCv+Ly
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4240 setup.exe