Overview
overview
3Static
static
3Winlocker_..._1.exe
windows7-x64
3Winlocker_..._1.exe
windows10-1703-x64
3Winlocker_..._1.exe
windows10-2004-x64
3Winlocker_..._1.exe
windows11-21h2-x64
3Winlocker_..._1.exe
android-10-x64
Winlocker_..._1.exe
android-11-x64
Winlocker_..._1.exe
android-13-x64
Winlocker_..._1.exe
android-9-x86
Winlocker_..._1.exe
macos-10.15-amd64
1Winlocker_..._1.exe
debian-12-armhf
Winlocker_..._1.exe
debian-12-mipsel
Winlocker_..._1.exe
debian-9-armhf
Winlocker_..._1.exe
debian-9-mips
Winlocker_..._1.exe
debian-9-mipsel
Winlocker_..._1.exe
ubuntu-18.04-amd64
Winlocker_..._1.exe
ubuntu-20.04-amd64
Winlocker_..._1.exe
ubuntu-22.04-amd64
Winlocker_..._1.exe
ubuntu-24.04-amd64
Static task
static1
Behavioral task
behavioral1
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
win11-20240508-en
Behavioral task
behavioral5
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
android-x64-20240603-en
Behavioral task
behavioral6
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral7
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
android-33-x64-arm64-20240603-en
Behavioral task
behavioral8
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral9
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
macos-20240410-en
Behavioral task
behavioral10
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral11
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
debian12-mipsel-20240418-en
Behavioral task
behavioral12
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral13
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral14
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral15
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral16
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
ubuntu2004-amd64-20240508-en
Behavioral task
behavioral17
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral18
Sample
Winlocker_builder_by_Amp_v6.1_1.exe
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
Winlocker_builder_by_Amp_v6.1_1.exe
-
Size
2.3MB
-
MD5
e142b5538058ce6b3a93418fae3ff592
-
SHA1
701f7417e23b45d97d670bb559761f8127642b6c
-
SHA256
e0690e6ba71039e1be5161e7e93ffc7a7882f57a5d38e3f7d4e9a8ffce080f93
-
SHA512
fcaa3e4ecb25026d430121ad918f5fed5a262d6382f10a331ab0bb0e95dcbaa8093e8d6b7e6f1d57cf961f5a3c0100708d968417e7eff663b9b804f435503d28
-
SSDEEP
49152:4Ey1J0CuV2ijBif0/mNp4Ln6we30HqC3o6rjRLgPuCPNvlKcdBHidlujv:4EEJVm2Qsc5Ln6we30H7VRLcumZlKSUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Winlocker_builder_by_Amp_v6.1_1.exe
Files
-
Winlocker_builder_by_Amp_v6.1_1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
" pR Size: - Virtual size: 15.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b:bbb Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�b+b�R Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE