General
- Target UnlockTool-2026-09-02-0.zip
- Size 230.5MB
- Sample260916-tsb2dasgrc
- SHA256 3eebf94ec0cbe0dea40b2aebfe8b5878262d8df6fb71a0f7e10ed5b03fb6d7f4
- MD5 b18464c8d423392102fdec5a637a8f2a
- SHA1 74dc6228327ca2c51f432a20c76941b5f6a58339
- SHA512 0cd3f451db7fda53ce0470bef5c2965622d6cacd9f6959e697b25ed34eebf171935ecaa8168b70a6cd7f6750362247eb349bf55a6373636b51f7c112f463e9c7
- SSDEEP 6291456:Fl07876mTDXNv4wXiXZnFp2Sp9DA48SLtKOv7H:FO7Da2IiJFpHpRhLQKH
- TLSH T1B0B83388439D60F8D3766A64363321714679EED098C5C6AFA6C0DAD5E203BBE0FB5DC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UnlockTool-2026-09-02-0.exe
Resource
win10ltsc2021-20260911-en
23 signatures
300 seconds
Malware Config
Targets
-
- Target UnlockTool-2026-09-02-0.exe
- Size 231.3MB
- SHA256 d0f2358e1970589182a2b03ea08ee2204938dcbaa4f2b1d59331e22e1bfa4d37
- MD5 83ef0bebc2566df0b3a59e6c2a6d859a
- SHA1 cd45c5327dcc48e8fdf5fb37494baa66fc880f67
- SHA512 7502af44eb8dec5b9bd550db79164927d425f4e9910106e06f7d30abc5452ea2dd8c46414bac5dbb6f1d9d9294b7936db5e13964b396f63a780ad2d26d279914
- SSDEEP 6291456:TRWvkdQEprXHbSuDmFL9tdQA3rzkwwft1wE+NP:T8v7kS4mftdf3XitC7P
- TLSH T1F6C8334A1149C0EBEA511A34A33A11970275ADCC18ADF86E36C07EBDB37FEB905357B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
3Install Root Certificate
2SIP and Trust Provider Hijacking
1