General
- Target винлок.exe
- Size 436KB
- Sample260721-sa124sycma
- SHA256 d167d7de10c0a15976d2877b5ce0bae62f1c9825e07880c58a1a3e01d2126144
- MD5 a9d32c2ea6c4957e4bfef9fb0dabd8d8
- SHA1 5dac99e3da8846602382c57a3fc24ccc4613ea20
- SHA512 b88f6707dda39ea2c509e6ae050339c054648fa0dd5d5385b53bb75f7f3a3feacdf69f580796701d7cc45e779456da4205f466352779ab0a0616581c7615b31e
- SSDEEP 12288:7MSU4joci8M6PW1GVFeFd60DFUyheBYM:ASUCpM2W1GvgmyeBv
- TLSH T1FD947D27F6D08437D16336B9DC1B9698A929BD505D24244A3BF83E4C4F39383F92629F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
винлок.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
винлок.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target винлок.exe
- Size 436KB
- SHA256 d167d7de10c0a15976d2877b5ce0bae62f1c9825e07880c58a1a3e01d2126144
- MD5 a9d32c2ea6c4957e4bfef9fb0dabd8d8
- SHA1 5dac99e3da8846602382c57a3fc24ccc4613ea20
- SHA512 b88f6707dda39ea2c509e6ae050339c054648fa0dd5d5385b53bb75f7f3a3feacdf69f580796701d7cc45e779456da4205f466352779ab0a0616581c7615b31e
- SSDEEP 12288:7MSU4joci8M6PW1GVFeFd60DFUyheBYM:ASUCpM2W1GvgmyeBv
- TLSH T1FD947D27F6D08437D16336B9DC1B9698A929BD505D24244A3BF83E4C4F39383F92629F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application