General
- Target unlock-android.exe
- Size 144.9MB
- Sample260815-wkkdws1dlc
- SHA256 10bb06cc2f2b0c0ab66320ba140c9bb43539eb2f63a06a029b8368475914f757
Score
8/10
Malware Config
Targets
-
- Target unlock-android.exe
- Size 144.9MB
- SHA256 10bb06cc2f2b0c0ab66320ba140c9bb43539eb2f63a06a029b8368475914f757
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1