General
- Target WinLock.exe
- Size 227KB
- Sample260727-rcyjbsbd36
- SHA256 3adb01f22998c6cc2a8e7d265d1f3eb96130f5805d3052fa94caa25ba8ff17d1
- MD5 95e2c858384e545bfc90cf2be631cae8
- SHA1 e1be94cbc6ad177c7fd723f9f007fa18cd314c6c
- SHA512 956ed65b469b6bba017441a11bcfb8a9d2fbe561f281b7899e6b7e318d45adb4ea2b6996828415df6e57ecf2d7d7841db60167b04a76297082c2550021e9b783
- SSDEEP 6144:Mv8A/ehUOqxaPBlmoSNU7PbDddLSCpMW90KImQiXnhbhew:MkAwUOqxaPruivj
- TLSH T12F345A98139B897DD63D237ED0A111050BF56227C103E35E9EE9E4F85F2B312AB12B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock.exe
Resource
win10v2004-20260513-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target WinLock.exe
- Size 227KB
- SHA256 3adb01f22998c6cc2a8e7d265d1f3eb96130f5805d3052fa94caa25ba8ff17d1
- MD5 95e2c858384e545bfc90cf2be631cae8
- SHA1 e1be94cbc6ad177c7fd723f9f007fa18cd314c6c
- SHA512 956ed65b469b6bba017441a11bcfb8a9d2fbe561f281b7899e6b7e318d45adb4ea2b6996828415df6e57ecf2d7d7841db60167b04a76297082c2550021e9b783
- SSDEEP 6144:Mv8A/ehUOqxaPBlmoSNU7PbDddLSCpMW90KImQiXnhbhew:MkAwUOqxaPruivj
- TLSH T12F345A98139B897DD63D237ED0A111050BF56227C103E35E9EE9E4F85F2B312AB12B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application