General
- Target последний винлокер.exe
- Size 350KB
- Sample260421-1mskhacv2j
- SHA256 629e4bc76590ed757afef775380c607a99e35296b39d6f38ee889586a7476645
- MD5 98eb38e48556e3e79ac8e6de4c2b8291
- SHA1 d194281eba1f8eac64929f8032e162a4935bafb0
- SHA512 c3707d23b4b9c53bc853c435124c6d90874ccc3941f97cef93926245e65a269a7ef420a27f871f99ff916ab55f398c317d03c0c6291444d0fc5691c9dd8d2685
- SSDEEP 6144:niGwvocn96DTdLdEidImYjaDZHASULHPSiAOWd82UVWrSCpMW90KImQiXnqbFFO:niGwvFcDTHpmSDZHAPbSi/WcD
- TLSH T1D874BFA8232F49BEC6AF53B9E092120B07F1D127C953E7482C6EA4FD5A57704B712787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
последний винлокер.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target последний винлокер.exe
- Size 350KB
- SHA256 629e4bc76590ed757afef775380c607a99e35296b39d6f38ee889586a7476645
- MD5 98eb38e48556e3e79ac8e6de4c2b8291
- SHA1 d194281eba1f8eac64929f8032e162a4935bafb0
- SHA512 c3707d23b4b9c53bc853c435124c6d90874ccc3941f97cef93926245e65a269a7ef420a27f871f99ff916ab55f398c317d03c0c6291444d0fc5691c9dd8d2685
- SSDEEP 6144:niGwvocn96DTdLdEidImYjaDZHASULHPSiAOWd82UVWrSCpMW90KImQiXnqbFFO:niGwvFcDTHpmSDZHAPbSi/WcD
- TLSH T1D874BFA8232F49BEC6AF53B9E092120B07F1D127C953E7482C6EA4FD5A57704B712787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
Adds Run key to start application
Drops desktop.ini file(s)
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1