Resubmissions
19-11-2024 19:46
241119-yhglbswman 119-11-2024 19:42
241119-ye2gbs1cqf 119-11-2024 19:37
241119-ybvvda1hpp 10Analysis
-
max time kernel
93s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19-11-2024 19:37
Static task
static1
Behavioral task
behavioral1
Sample
Unlock_Tool_v2.6.7.rar
Resource
win7-20241023-en
windows7-x64
29 signatures
150 seconds
Behavioral task
behavioral2
Sample
Unlock_Tool_v2.6.7.rar
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Unlock_Tool_v2.6.7.rar
-
Size
49.5MB
-
MD5
4b451061edc32d1712e113e60e606c35
-
SHA1
ea13c95654f1a9f0c06a6b128cf983d188535c35
-
SHA256
b93eed36cc9c66d3052950b1db08549a567a94a176dd44ec7f63bc5a98d92ca1
-
SHA512
4cc79b6ae84ed2c8b938702e10af49a3bf2f5bc2ca0349faa8f2b015b19f4e52305d6a64e3e206071db369870a32045b640ea324966b54659d8f7d6654ebb8f2
-
SSDEEP
786432:17stHfy75Fu6upTSWMvz8CB9HSs0o6qx7G00chS1IwCMMXkzf1pinf1f6Z:1x5Fu6vWISAnMcI1IwCrU7w6Z
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4580 7zFM.exe Token: 35 4580 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4580 7zFM.exe