Resubmissions
19-11-2024 19:46
241119-yhglbswman 119-11-2024 19:42
241119-ye2gbs1cqf 119-11-2024 19:37
241119-ybvvda1hpp 10Analysis
-
max time kernel
1563s -
max time network
1565s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19-11-2024 19:46
Static task
static1
Behavioral task
behavioral1
Sample
Unlock_Tool.zip
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Unlock_Tool.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
1800 seconds
General
-
Target
Unlock_Tool.zip
-
Size
49.5MB
-
MD5
e8337f9891f2d8d17adfe3d612a9591d
-
SHA1
6c4752f2a8ab432cdea8c62050996c92b775debc
-
SHA256
60fb07e0ee62f326fd549235eb4d672133af86efccf0a72465c60e18165d3d74
-
SHA512
02146be10a81cc7f51932b877e28447911107550d0969a4fc27ee056beaa6f4883a3d4746aa6337538f55986fa039f3d5d227a6eb8b303e353de30c225c1170f
-
SSDEEP
786432:n7stHfy75Fu6upTSWMvz8CB9HSs0o6qx7G00chS1IwCMMXkzf1pinf1f63:nx5Fu6vWISAnMcI1IwCrU7w63
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1796 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1796 7zFM.exe Token: 35 1796 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1796 7zFM.exe