Analysis
-
max time kernel
1360s -
max time network
1150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13-10-2024 20:45
General
-
Target
UnlockerInject32.exe
-
Size
11KB
-
MD5
5b964dbcc99edee45a6f235417713a93
-
SHA1
e65bb79a470a509a50b4c275c10bc10892ab11ca
-
SHA256
3b1afea2711e5d731a60b41e87f4711fe1db3345fa316be20347376068479dd5
-
SHA512
60dd41e0434fcc7d6d57a02d69cd47c2b74c9c18316f59aee88da087c22c3e8408aa94ab9738edc1b229db8f83e620354394ae3847e216c2bce33dc0d3e62743
-
SSDEEP
192:kpjAiTRs0TjebH947yowJL/W6Mgb5+ebCfYEQpkqs1I5Zgjl5w:kWIsUgHqYJLygbPbCQW1M6jk
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\UnlockerInject32.exe"C:\Users\Admin\AppData\Local\Temp\UnlockerInject32.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken