Overview
overview
10Static
static
3ToolsUnlockPro.rar
windows11-21h2-x64
1MEIPreload...ck.dll
windows11-21h2-x64
3MEIPreload...re.dll
windows11-21h2-x64
3MEIPreload...ts.dll
windows11-21h2-x64
3MEIPreload...57.dll
windows11-21h2-x64
3MEIPreload...sw.dll
windows11-21h2-x64
3Readme.txt
windows11-21h2-x64
3ToolsUnlock_v2.9.exe
windows11-21h2-x64
10locales/ca.pak
windows11-21h2-x64
3locales/hi.pak
windows11-21h2-x64
3locales/hr.pak
windows11-21h2-x64
3locales/it.pak
windows11-21h2-x64
3locales/ja.pak
windows11-21h2-x64
3locales/lv.pak
windows11-21h2-x64
3locales/ml.pak
windows11-21h2-x64
3locales/ms.pak
windows11-21h2-x64
3locales/nl.pak
windows11-21h2-x64
3locales/pl.pak
windows11-21h2-x64
3locales/ro.pak
windows11-21h2-x64
3locales/ru.pak
windows11-21h2-x64
3locales/sk.pak
windows11-21h2-x64
3locales/sl.pak
windows11-21h2-x64
3locales/sr.pak
windows11-21h2-x64
3locales/sv.pak
windows11-21h2-x64
3locales/sw.pak
windows11-21h2-x64
3locales/ta.pak
windows11-21h2-x64
3locales/te.pak
windows11-21h2-x64
3locales/th.pak
windows11-21h2-x64
3locales/tr.pak
windows11-21h2-x64
3locales/uk.pak
windows11-21h2-x64
3locales/vi.pak
windows11-21h2-x64
3locales/zh-TW.pak
windows11-21h2-x64
3Analysis
- max time kernel
598s - max time network
388s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/05/2026, 13:25
Static task
static1
Behavioral task
behavioral1
Sample
ToolsUnlockPro.rar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral2
Sample
MEIPreload/Qt5Quick.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
MEIPreload/Qt5WebEngineCore.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral4
Sample
MEIPreload/Qt5Widgets.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
MEIPreload/avcodec-57.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral6
Sample
MEIPreload/opengl32sw.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
Readme.txt
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral8
Sample
ToolsUnlock_v2.9.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
locales/ca.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral10
Sample
locales/hi.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
locales/hr.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral12
Sample
locales/it.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
locales/ja.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral14
Sample
locales/lv.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
locales/ml.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
locales/ms.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
locales/nl.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral18
Sample
locales/pl.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
locales/ro.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
locales/ru.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
locales/sk.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
locales/sl.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
locales/sr.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
locales/sv.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
locales/sw.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
locales/ta.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
locales/te.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
locales/th.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
locales/tr.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
locales/uk.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
locales/vi.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
locales/zh-TW.pak
Resource
win11-20260513-en
windows11-21h2-x64
General
- Target ToolsUnlockPro.rar
- Size 140.3MB
- Sample260517-qpdh9agy6x
- SHA256 49c75a3ea1b0d8fa41dec705a1ded5eb16632cb7d6c24fe0cadcdffbed244394
- MD5 5e5b4de12123fe03da9f112dcaad5a45
- SHA1 93eecf7a470a7f5a043c64b9cd497ccaf9c9bbd3
- SHA512 deffa7597373a1eb6ccc54b37b1beafea632ff6b962d1029ade4fe0c6712f46a61a74e22404cfd21447fe7bd43a463b3aa0dd0947fb1157c4d7d2c1e8521a96a
- SSDEEP 3145728:bIEWdk2Z/kIBxM4WCZ5JGnxdBp4HLi06+HXNoGrxckQ+Nj:qR/kIHMxW5JmxdBp4Hj5HdoicLk
- TLSH T1A16833CBA63C075EB4A96E3A3540A77F0A27FDA3F86108F7D2544C8A513075994D2F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2796 7zFM.exe Token: 35 2796 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2796 7zFM.exe