c63f72dc40e17b31486055aff99b830a3a565614bd8c09f709a161a1733f1377

Submit
Reports

Overview

overview

Static

static

LICENSE.html

windows7-x64

LICENSE.html

windows10-2004-x64

Unlock_Tool_2.1.4.exe

windows7-x64

Unlock_Tool_2.1.4.exe

windows10-2004-x64

lesseeVari...es.dll

windows7-x64

lesseeVari...es.dll

windows10-2004-x64

locales/re...me.dll

windows7-x64

locales/re...me.dll

windows10-2004-x64

locales/re...me.dll

windows7-x64

locales/re...me.dll

windows10-2004-x64

locales/re...me.dll

windows7-x64

locales/re...me.dll

windows10-2004-x64

locales/re...ro.dll

windows7-x64

locales/re...ro.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

locales/re...le.dll

windows7-x64

locales/re...le.dll

windows10-2004-x64

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10-10-2024 15:47

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

LICENSE.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

LICENSE.html

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral3

Sample

Unlock_Tool_2.1.4.exe

Resource

win7-20240903-en

vidar 23a142269e47ce1692ccc9fb68473bc2 credential_access discovery spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral4

Sample

Unlock_Tool_2.1.4.exe

Resource

win10v2004-20241007-en

vidar 23a142269e47ce1692ccc9fb68473bc2 credential_access discovery spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral5

Sample

lesseeVariant/modules.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

lesseeVariant/modules.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

locales/resources/Data/Managed/Unity.Postprocessing.Runtime.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

locales/resources/Data/Managed/Unity.Postprocessing.Runtime.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

locales/resources/Data/Managed/Unity.RenderPipelines.Core.Runtime.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

locales/resources/Data/Managed/Unity.RenderPipelines.Core.Runtime.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

locales/resources/Data/Managed/Unity.RenderPipelines.Lightweight.Runtime.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

locales/resources/Data/Managed/Unity.RenderPipelines.Lightweight.Runtime.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

locales/resources/Data/Managed/Unity.TextMeshPro.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

locales/resources/Data/Managed/Unity.TextMeshPro.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

locales/resources/Data/Managed/UnityEngine.AIModule.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

locales/resources/Data/Managed/UnityEngine.AIModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

locales/resources/Data/Managed/UnityEngine.ARModule.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

locales/resources/Data/Managed/UnityEngine.ARModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

locales/resources/Data/Managed/UnityEngine.AccessibilityModule.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

locales/resources/Data/Managed/UnityEngine.AccessibilityModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

locales/resources/Data/Managed/UnityEngine.AnimationModule.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

locales/resources/Data/Managed/UnityEngine.AnimationModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

locales/resources/Data/Managed/UnityEngine.AssetBundleModule.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

locales/resources/Data/Managed/UnityEngine.AssetBundleModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

locales/resources/Data/Managed/UnityEngine.AudioModule.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

locales/resources/Data/Managed/UnityEngine.AudioModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

locales/resources/Data/Managed/UnityEngine.BaselibModule.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

locales/resources/Data/Managed/UnityEngine.BaselibModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

locales/resources/Data/Managed/UnityEngine.ClothModule.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

locales/resources/Data/Managed/UnityEngine.ClothModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

locales/resources/Data/Managed/UnityEngine.CloudWebServicesModule.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

locales/resources/Data/Managed/UnityEngine.CloudWebServicesModule.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

lesseeVariant/modules.dll
Size

907KB
MD5

dc05f0b8f1a32e872721d3486e6332b8
SHA1

dbf055b0f934640fadcfaa93971fead8df7a3869
SHA256

37ec5f998a5c376d4fcd4342b43a4163d1f043e0f7711e46677cd30013882723
SHA512

0f89d713237ef11a1ef8d824ad9767bb13fb4f5f334acdd65af0ba6e54cec4a910398636683254b3fe4d46a069a1781187313684ff827a907b8b968134f6efa0
SSDEEP

24576:z0OY4ZFajHYDTR2yfVbf+c6Z5WODYsHh6g3P0zAk75:z0CZFaj4HR2yfVbd6Z5WODYsHh6g3P03

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2916	2248	rundll32.exe	30
PID 2248 wrote to memory of 2916	2248	rundll32.exe	30
PID 2248 wrote to memory of 2916	2248	rundll32.exe	30

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lesseeVariant\modules.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2248 -s 88
  2⤵
  PID:2916

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads