Analysis
- user interaction
yes - max time kernel
150s - max time network
159s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/08/2026, 18:36
General
- Target blondy_unlocker.exe
- Size 93.3MB
- Sample260810-w87t4aaa43
- SHA256 a58aaa05145f91d8bb0d3b02faed7b2fcbe66ff0507fe49735270dad9ca213f2
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\blondy_unlocker.exe"C:\Users\Admin\AppData\Local\Temp\blondy_unlocker.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5840-0-0x0000024273412000-0x0000024273413000-memory.dmp
memory/5840-1-0x0000024273410000-0x0000024273411000-memory.dmp
memory/5840-3-0x0000024273413000-0x0000024273414000-memory.dmp
memory/5840-2-0x0000024273414000-0x0000024273415000-memory.dmp
memory/5840-7-0x0000024273416000-0x0000024273417000-memory.dmp
memory/5840-6-0x0000024273417000-0x0000024273418000-memory.dmp
memory/5840-5-0x0000024273411000-0x0000024273412000-memory.dmp
memory/5840-4-0x0000024273415000-0x0000024273416000-memory.dmp
memory/5840-13-0x0000024273418000-0x000002427341A000-memory.dmp
memory/5840-39-0x000002427341C000-0x000002427341D000-memory.dmp
memory/5840-38-0x000002427341A000-0x000002427341B000-memory.dmp
memory/5840-37-0x000002427341B000-0x000002427341C000-memory.dmp
memory/5840-42-0x0000024273412000-0x0000024273413000-memory.dmp
memory/5840-41-0x000002427341F000-0x0000024273420000-memory.dmp
memory/5840-40-0x000002427341D000-0x000002427341F000-memory.dmp
memory/5840-44-0x0000024273421000-0x0000024273422000-memory.dmp
memory/5840-43-0x0000024273420000-0x0000024273421000-memory.dmp
memory/5840-45-0x0000024273422000-0x0000024273423000-memory.dmp
memory/5840-46-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-47-0x0000024273424000-0x0000024273425000-memory.dmp
memory/5840-48-0x0000024273425000-0x0000024273426000-memory.dmp
memory/5840-58-0x0000024273430000-0x0000024273431000-memory.dmp
memory/5840-57-0x000002427342F000-0x0000024273430000-memory.dmp
memory/5840-59-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-56-0x000002427342E000-0x000002427342F000-memory.dmp
memory/5840-55-0x000002427342D000-0x000002427342E000-memory.dmp
memory/5840-54-0x000002427342C000-0x000002427342D000-memory.dmp
memory/5840-53-0x000002427342B000-0x000002427342C000-memory.dmp
memory/5840-52-0x000002427342A000-0x000002427342B000-memory.dmp
memory/5840-51-0x0000024273429000-0x000002427342A000-memory.dmp
memory/5840-50-0x0000024273427000-0x0000024273429000-memory.dmp
memory/5840-49-0x0000024273426000-0x0000024273427000-memory.dmp
memory/5840-71-0x0000024273431000-0x0000024273432000-memory.dmp
memory/5840-74-0x0000024273437000-0x0000024273438000-memory.dmp
memory/5840-73-0x0000024273436000-0x0000024273437000-memory.dmp
memory/5840-72-0x0000024273434000-0x0000024273436000-memory.dmp
memory/5840-75-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-76-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-77-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-78-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-79-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-80-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-81-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-82-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-87-0x0000024273423000-0x0000024273424000-memory.dmp
memory/5840-91-0x000002427343A000-0x000002427343B000-memory.dmp
memory/5840-90-0x0000024273438000-0x000002427343A000-memory.dmp
memory/5840-89-0x0000024273432000-0x0000024273434000-memory.dmp
memory/5840-88-0x0000024265000000-0x0000024266000000-memory.dmp
memory/5840-86-0x0000024273416000-0x0000024273417000-memory.dmp
memory/5840-85-0x0000024273417000-0x0000024273418000-memory.dmp
memory/5840-84-0x0000024273415000-0x0000024273416000-memory.dmp
memory/5840-83-0x0000024265000000-0x0000024266000000-memory.dmp