Resubmissions

20/06/2026, 09:39

260620-lmn5raft8w8

20/06/2026, 03:17

260620-ds7v2ses7x8

General

  • Target
    https://github.com/Psychon44/winlocker-builder-by-amp-v6.1/raw/refs/heads/main/Winlocker%20builder%20by%20Amp%20v6.1.exe
  • Sample260620-lmn5raft8w

Malware Config

Targets

    • Target
      https://github.com/Psychon44/winlocker-builder-by-amp-v6.1/raw/refs/heads/main/Winlocker%20builder%20by%20Amp%20v6.1.exe
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks