Overview
overview
8Static
static
3Unlocker.exe
windows10-2004-x64
1Unlocker.exe
windows11-ltsc_2024-x64
8bz2.dll
windows10-2004-x64
1bz2.dll
windows11-ltsc_2024-x64
8libcurl.dll
windows10-2004-x64
1libcurl.dll
windows11-ltsc_2024-x64
1liblzma.dll
windows10-2004-x64
1liblzma.dll
windows11-ltsc_2024-x64
1zip.dll
windows10-2004-x64
1zip.dll
windows11-ltsc_2024-x64
1zlib1.dll
windows10-2004-x64
1zlib1.dll
windows11-ltsc_2024-x64
1zstd.dll
windows10-2004-x64
1zstd.dll
windows11-ltsc_2024-x64
8Analysis
- user interaction
yes - max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 04:24
Static task
static1
Behavioral task
behavioral1
Sample
Unlocker.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Unlocker.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
bz2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
bz2.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
libcurl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
libcurl.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
liblzma.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
liblzma.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
zip.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
zip.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
zlib1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
zlib1.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
zstd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
zstd.dll
Resource
win11ltsc2024-20260629-en
General
- Target zip.dll
- Size 176KB
- Sample260702-e1g52abx5v
- SHA256 4dbc3f42b466e4f01b0738599399d5af7df83688c235f0dca976c6fa4454306d
- MD5 11d14bfbf08e4fdc06359e63baefc4f6
- SHA1 c1726dcf11ffe4d3d135edd46c5db3ba2f644a76
- SHA512 26a4fd0800184a48c5589590fd00c323fda1f33b75a399e6f34e6351b7b770d76981ca514d1a4aacf8a78ced1a360205428ffac1b2b83fd9dfb7fb2b0b2f1711
- SSDEEP 1536:pKii5rjSVN0WNoyO++gyCBnH+LdFf2i8kgbhAWCFYpdMjMjFvHkA:Vi5S7GyWgyCBHiF+lCFYD0gk
- TLSH T12C0429AB37A42176E177817D85C3660BE2B27111073557CF44E48B7A6B33ECA2A7E314
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\zip.dll,#11⤵PID:3552
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2496