General
-
Target
Unlock_Tool.zip
-
Size
49.9MB
-
Sample
241116-r3d8daybme
-
MD5
57f471e4ee9e74cc507e80d09defaeb0
-
SHA1
35ec87607eec08fec81fdda22eda54da246d22c1
-
SHA256
b687de1924f7805b57a1b528ed804d6d2f5e2e3f8058ab904fe0983a9d6a2a36
-
SHA512
2e92116f096c917675abdad2d5a78949141275d03df2a08d47d71c43c3896bbf65690ae19faecc860eae1926879bd7dc27b4342e7e71177cc202f94b8292cb32
-
SSDEEP
1572864:dHRk6MsvlqSOFhI63C6w1TMZmm+sIoE435lp4kJri:dVnlxkr3URo+gN5Akw
Static task
static1
Behavioral task
behavioral1
Sample
Unlock_Tool_v2.6.4.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Unlock_Tool_v2.6.4.rar
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
Unlock_Tool_v2.6.4.rar
-
Size
49.9MB
-
MD5
b1a7540cd12701261738fd879efb2779
-
SHA1
1b3ad97b572045c61003de254d7833cab2391ee8
-
SHA256
69289808086eba703c638e42fa8f2adbe274b98ec0e3d005b62560e42a9200f0
-
SHA512
2a5ffac6840e56a2388f16cbbb737789482108fd77658467d55bcbcd49bcc3a13e942b073951cb3470f2cb42495e41b84404bedb2d4d8da33c9313e2fd944e44
-
SSDEEP
1572864:5HRk6MsvlqSOFhI63C6w1TMZmm+sIoE435lp4kJr2:BVnlxkr3URo+gN5Aks
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-