Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    94s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    30/05/2026, 17:26

General

  • Target
    JuanseUnlock V3/JuanseUnlock.exe
  • Size 9.2MB
  • Sample260530-vz2faact5n
  • SHA256 5f51e7712422767a08e5411453bf69daa49258a37b9d335c9c13820209dd13a7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JuanseUnlock V3\JuanseUnlock.exe
    "C:\Users\Admin\AppData\Local\Temp\JuanseUnlock V3\JuanseUnlock.exe"
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    PID:2276
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1284
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2276-0-0x0000017CC15A0000-0x0000017CC1ED4000-memory.dmp

        memory/2276-1-0x0000017CDD460000-0x0000017CDD67C000-memory.dmp

        memory/2276-2-0x0000017CDD3C0000-0x0000017CDD3D0000-memory.dmp

        memory/2276-3-0x0000017CDD3C0000-0x0000017CDD3D0000-memory.dmp

        memory/2276-4-0x0000017CDD3C0000-0x0000017CDD3D0000-memory.dmp

        memory/2276-5-0x0000017CDD3C0000-0x0000017CDD3D0000-memory.dmp

        memory/2276-6-0x0000017CDD3C0000-0x0000017CDD3D0000-memory.dmp

        memory/2276-7-0x0000017CDD3C0000-0x0000017CDD3D0000-memory.dmp