General
- Target winlocker.exe
- Size 6.2MB
- Sample260528-pal2eaev6r
- SHA256 3ab4d2a32de98724eeaa87358630b688b596b8d50914d2eb04925fa4615ebef8
- MD5 222a1a2918f0ec3e6fee5f1a9370c9f0
- SHA1 defd24177335a9ad22a85a2c66624046df5220f5
- SHA512 5afbd01fc128756e4ec0144344a1db72934afc88341322f9f06cd51332d917660babef4f4c0e77a7ffdba8789763399d0adde5bf4803bee51a759c4a4ce6a293
- SSDEEP 49152:na+ExIaaa9V/l9D0mB8LMrRZnoIgSAFWwKagfE95Npc18NrAQhJC3g1w:naNnT50mB8uAr5NhE4CH
- TLSH T128662A27ECA229D4C4EE8175C673412BBA627C491B7423E715E1F3241F36BE09EB6B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
winlocker.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
winlocker.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target winlocker.exe
- Size 6.2MB
- SHA256 3ab4d2a32de98724eeaa87358630b688b596b8d50914d2eb04925fa4615ebef8
- MD5 222a1a2918f0ec3e6fee5f1a9370c9f0
- SHA1 defd24177335a9ad22a85a2c66624046df5220f5
- SHA512 5afbd01fc128756e4ec0144344a1db72934afc88341322f9f06cd51332d917660babef4f4c0e77a7ffdba8789763399d0adde5bf4803bee51a759c4a4ce6a293
- SSDEEP 49152:na+ExIaaa9V/l9D0mB8LMrRZnoIgSAFWwKagfE95Npc18NrAQhJC3g1w:naNnT50mB8uAr5NhE4CH
- TLSH T128662A27ECA229D4C4EE8175C673412BBA627C491B7423E715E1F3241F36BE09EB6B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Event Triggered Execution: Image File Execution Options Injection
-
Creates new service(s)
-
Drops startup file
MITRE ATT&CK Enterprise v16
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Scheduled Task/Job
1Scheduled Task
1