Overview

overview

1

Static

static

1

Unlock_Tool.zip

windows7-x64

1

Unlock_Tool.zip

windows10-2004-x64

1

Resubmissions

19-11-2024 19:46

241119-yhglbswman 1

19-11-2024 19:42

241119-ye2gbs1cqf 1

19-11-2024 19:37

241119-ybvvda1hpp 10

Analysis

  • max time kernel
    150s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    19-11-2024 19:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Unlock_Tool.zip

  • Size

    49.5MB

  • MD5

    e8337f9891f2d8d17adfe3d612a9591d

  • SHA1

    6c4752f2a8ab432cdea8c62050996c92b775debc

  • SHA256

    60fb07e0ee62f326fd549235eb4d672133af86efccf0a72465c60e18165d3d74

  • SHA512

    02146be10a81cc7f51932b877e28447911107550d0969a4fc27ee056beaa6f4883a3d4746aa6337538f55986fa039f3d5d227a6eb8b303e353de30c225c1170f

  • SSDEEP

    786432:n7stHfy75Fu6upTSWMvz8CB9HSs0o6qx7G00chS1IwCMMXkzf1pinf1f63:nx5Fu6vWISAnMcI1IwCrU7w63

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 9 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Unlock_Tool.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:1148
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:2020
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x430
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2404
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\Unlock_Tool_v2.6.7.rar
      1⤵
        PID:2152

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\locales\resources\Data\level4.resS
        Filesize

        128KB

        MD5

        64d183ad524dfcd10a7c816fbca3333d

        SHA1

        5a180d5c1f42a0deaf475b7390755b3c0ecc951c

        SHA256

        5a666340f42f0f985772024d90a83d15c9a241a68d58205cd4afbb1a31f1621a

        SHA512

        3cab59dff09981f49d1070fba06a781439bb1ea2dae0cfcb937d9875bbe9e866be2c951cfc6a3ca4a92aea79dd3e9c4792a765f5a06f230a57dabcab2f0b3c1e

        Download Submit