Overview
overview
7Static
static
3UnixStealerV2.rar
windows10-ltsc_2021-x64
1UnixSteale...er.exe
windows10-ltsc_2021-x64
1UnixSteale...er.exe
windows10-ltsc_2021-x64
7UnixSteale...g.json
windows10-ltsc_2021-x64
3UnixSteale...db.dll
windows10-ltsc_2021-x64
1UnixSteale...db.dll
windows10-ltsc_2021-x64
1UnixSteale...ks.dll
windows10-ltsc_2021-x64
1UnixSteale...il.dll
windows10-ltsc_2021-x64
1UnixSteale...le.dll
windows10-ltsc_2021-x64
1UnixSteale...ub.exe
windows10-ltsc_2021-x64
7Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
18/07/2026, 00:49
Static task
static1
Behavioral task
behavioral1
Sample
UnixStealerV2.rar
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
UnixStealerV2/Builder.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
UnixStealerV2/Builder.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral4
Sample
UnixStealerV2/Builder.runtimeconfig.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
UnixStealerV2/Mono.Cecil.Mdb.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
UnixStealerV2/Mono.Cecil.Pdb.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
UnixStealerV2/Mono.Cecil.Rocks.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral8
Sample
UnixStealerV2/Mono.Cecil.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral9
Sample
UnixStealerV2/Spectre.Console.dll
Resource
win10ltsc2021-20260513-en
General
- Target UnixStealerV2.rar
- Size 679KB
- Sample260718-a6f3psex9v
- SHA256 9bd8070dabcd70a366a634e32c0ce060aef82512b4da283b75caa70147ea8826
- MD5 a81793a30b7e622eb1f0fb107a2b931c
- SHA1 71fbf6b4ad1f1894ffb378d28683058c0e29c026
- SHA512 87209619e0ac54f124d0700872d73c974d7d85d279d8e13cc6ae1eee0417029be847ee8c8ec13b32cf0188f2a7d5b27e3f15555476f7ab9e6fc92cf98bb40a7d
- SSDEEP 12288:rfNMympO0ijhIg9TqoR3pVWwBcvZ+k/ju3/NCw3PCAxe0uYUja68u028QUQDA:rfmpwIgHVHmvPS3bPXwtY4anu0YA
- TLSH T19EE433705F599B2396A28977A9937C146E84022E7178C215CB7F037B66EC50FE12C2B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3628 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3628 7zFM.exe Token: 35 3628 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3628 7zFM.exe