Analysis
- user interaction
yes - max time kernel
16s - max time network
25s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/05/2026, 03:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UnlockAll.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
30 seconds
Behavioral task
behavioral2
Sample
UnlockAll.exe
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
30 seconds
General
- Target UnlockAll.exe
- Size 17.6MB
- Sample260503-dn63ysay41
- SHA256 943b29246bf3ad4e01a44fcbeac93947795567c3e42aa264c369f579eea26136
- MD5 960f4c1711dae32de22327e36866a3ca
- SHA1 b2d18279b9248c6a283b483961913a4ec735e345
- SHA512 fc22d716713948d42fd31429168515cccac76f92d1bdf8dc8d62a3e3c46ed5d56396d7559194d0cd4ee9b776a73c18260049e63e30a5c23a543139c486637364
- SSDEEP 196608:wMj0nc896WIbEX1OwYyjtVh40Hh3Xvl+90x8ptsOgmXZzectsznrEj9UoggLEh1O:wc0xtIO10yzh40Beq8ptsEz28to1Wdb
- TLSH T18B1723CB85ED9798D1834760698223CA24C8A076DDEC956D39CF1C02F536C6986CEBF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4552 UnlockAll.exe 4552 UnlockAll.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe 4552 UnlockAll.exe