Overview

overview

9

Static

static

3

winlocker_....6.exe

windows10-ltsc_2021-x64

9

winlocker_...TA.exe

windows10-ltsc_2021-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    winlocker_builder_0.6.zip
  • Size 12.3MB
  • Sample260706-tryhzshw2y
  • SHA256 e020b041952d6908fd1b6da03de30edb2aea1906ed9a8c317abf43c2022daba5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
discoverypersistencepyinstallerransomware

Malware Config

Targets

    • Target
      winlocker_builder_0.6.exe
    • Size 6.2MB
    • SHA256 e6fe8b2f92e4be92ac78d099793cc57d1634762599f18e1ae3def2d56eb40845
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discoverypersistenceransomware

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Loads dropped DLL

    • Probable phishing domain

    behavioral1
    • Target
      winlocker_builder_0.6_BETA.exe
    • Size 6.2MB
    • SHA256 5602aba38460053df33526cbec83a9776a7d45a0490ce7bbe757420e65759506
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Loads dropped DLL

    behavioral2

MITRE ATT&CK Enterprise v16

Tasks