Resubmissions

19-11-2024 19:46

241119-yhglbswman 1

19-11-2024 19:42

241119-ye2gbs1cqf 1

19-11-2024 19:37

241119-ybvvda1hpp 10

Analysis

  • max time kernel
    1563s
  • max time network
    1565s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-11-2024 19:46

General

  • Target

    Unlock_Tool.zip

  • Size

    49.5MB

  • MD5

    e8337f9891f2d8d17adfe3d612a9591d

  • SHA1

    6c4752f2a8ab432cdea8c62050996c92b775debc

  • SHA256

    60fb07e0ee62f326fd549235eb4d672133af86efccf0a72465c60e18165d3d74

  • SHA512

    02146be10a81cc7f51932b877e28447911107550d0969a4fc27ee056beaa6f4883a3d4746aa6337538f55986fa039f3d5d227a6eb8b303e353de30c225c1170f

  • SSDEEP

    786432:n7stHfy75Fu6upTSWMvz8CB9HSs0o6qx7G00chS1IwCMMXkzf1pinf1f63:nx5Fu6vWISAnMcI1IwCrU7w63

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Unlock_Tool.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads