Overview

overview

9

Static

static

3

winlocker_...2).zip

windows10-2004-x64

1

winlocker_...2).zip

windows11-ltsc_2024-x64

1

info_winlock.txt

windows10-2004-x64

1

info_winlock.txt

windows11-ltsc_2024-x64

1

winlock-builder-2.png

windows10-2004-x64

1

winlock-builder-2.png

windows11-ltsc_2024-x64

1

winlock_builder_1.png

windows10-2004-x64

1

winlock_builder_1.png

windows11-ltsc_2024-x64

1

winlocker_....6.exe

windows10-2004-x64

9

winlocker_....6.exe

windows11-ltsc_2024-x64

9

main.pyc

windows10-2004-x64

3

main.pyc

windows11-ltsc_2024-x64

3

winlocker_...TA.exe

windows10-2004-x64

9

winlocker_...TA.exe

windows11-ltsc_2024-x64

9

main1.pyc

windows10-2004-x64

3

main1.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    winlocker_builder_0.6 (2).zip
  • Size 12.3MB
  • Sample260719-pevjcaax8n
  • SHA256 e020b041952d6908fd1b6da03de30edb2aea1906ed9a8c317abf43c2022daba5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
discoveryexecutionpyinstallerransomware

Malware Config

Targets

    • Target
      winlocker_builder_0.6 (2).zip
    • Size 12.3MB
    • SHA256 e020b041952d6908fd1b6da03de30edb2aea1906ed9a8c317abf43c2022daba5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      info_winlock.txt
    • Size 876B
    • SHA256 80a58cd747090b3f559e9f3c2c2be1922cb77e3d36053e7b83420119aebf2edf
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral3behavioral4
    • Target
      winlock-builder-2.png
    • Size 89KB
    • SHA256 15c3b39b7d65e88fef1087a82cceea47cf553b2e515b8957f457b386a3b7e050
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      winlock_builder_1.png
    • Size 76KB
    • SHA256 adcd4e69cbd659612995253e8e4efb5e4ee61928d0854277e6d7c2cd845d0f17
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      winlocker_builder_0.6.exe
    • Size 6.2MB
    • SHA256 e6fe8b2f92e4be92ac78d099793cc57d1634762599f18e1ae3def2d56eb40845
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Loads dropped DLL

    behavioral10behavioral9
    • Target
      main.pyc
    • Size 453B
    • SHA256 4dbebdbe1f3795b24d5358d1182b2fe0907656c935e143c0b9ea2f005f2ff3a4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      winlocker_builder_0.6_BETA.exe
    • Size 6.2MB
    • SHA256 5602aba38460053df33526cbec83a9776a7d45a0490ce7bbe757420e65759506
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Loads dropped DLL

    behavioral13behavioral14
    • Target
      main1.pyc
    • Size 470B
    • SHA256 cea4aedbef5968ac70187036e46925148cd84b729cb8a5c65a24e82ec8994658
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks