Resubmissions

19-11-2024 19:46

241119-yhglbswman 1

19-11-2024 19:42

241119-ye2gbs1cqf 1

19-11-2024 19:37

241119-ybvvda1hpp 10

Analysis

  • max time kernel
    93s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-11-2024 19:37

General

  • Target

    Unlock_Tool_v2.6.7.rar

  • Size

    49.5MB

  • MD5

    4b451061edc32d1712e113e60e606c35

  • SHA1

    ea13c95654f1a9f0c06a6b128cf983d188535c35

  • SHA256

    b93eed36cc9c66d3052950b1db08549a567a94a176dd44ec7f63bc5a98d92ca1

  • SHA512

    4cc79b6ae84ed2c8b938702e10af49a3bf2f5bc2ca0349faa8f2b015b19f4e52305d6a64e3e206071db369870a32045b640ea324966b54659d8f7d6654ebb8f2

  • SSDEEP

    786432:17stHfy75Fu6upTSWMvz8CB9HSs0o6qx7G00chS1IwCMMXkzf1pinf1f6Z:1x5Fu6vWISAnMcI1IwCrU7w6Z

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Unlock_Tool_v2.6.7.rar"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads