Analysis

  • max time kernel
    33s
  • max time network
    39s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20250113-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20250113-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    27/01/2025, 20:33

General

  • Target

    Winlocker Builder v0.6.exe

  • Size

    2.0MB

  • MD5

    82f63091fc1d4a380865c191122df226

  • SHA1

    a5c25ea8765618c92ecf834374cfaf9743f7f586

  • SHA256

    e95f5cf4e6c42e5f77aba42341201ebf7bae8febeefe8c18f5af5de1177e26ba

  • SHA512

    a1190cb8dd64f6aee973fd1e350b140ec31b4d291753db0ba67d35c11b1d0387d5410e6d644bff43d7ab33f685a7f723dd4cc65dcce94b22fbcc998d5298145c

  • SSDEEP

    49152:Cd+qH5Juzw7zOHB1dRHaEaIZE9dTfiqR+xr:Cd15awXOhb9aEaIZ05BR+

Score
9/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Winlocker Builder v0.6.exe
    "C:\Users\Admin\AppData\Local\Temp\Winlocker Builder v0.6.exe"
    1⤵
    • Looks for VirtualBox Guest Additions in registry
    • Looks for VMWare Tools registry key
    • Checks BIOS information in registry
    • Maps connected drives based on registry
    PID:2472

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2472-0-0x00007FFAF0193000-0x00007FFAF0195000-memory.dmp

          Filesize

          8KB

        • memory/2472-1-0x00000000004A0000-0x00000000006A2000-memory.dmp

          Filesize

          2.0MB