General
- Target WinLock676767.exe
- Size 209KB
- Sample260808-paktcawene
- SHA256 739eb4faceec8adcbd97d3620e0068bdd42aca9a3e162753c52ae9c94d71fcbf
- MD5 7a29487d2808603330ad03c79e9751ea
- SHA1 cebc61f298a5362de24fae5853fc080ef7ea47f2
- SHA512 a3e4df04a21b3ec5fe2d977d041010a7f26237852dcb41640e2f87aff3ab3d8311e6af683bb5b29bb542b01e7d675e7554119c33ef4b7149f916739e48be497d
- SSDEEP 6144:wEhfGkHBdZanRtjU9x9aygCSCpMW90KImQijnfbxL:j++d0j
- TLSH T134245D98136AC93DC2BE27BED0A611060BF0B217D503E74CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock676767.exe
Resource
win11-20260513-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target WinLock676767.exe
- Size 209KB
- SHA256 739eb4faceec8adcbd97d3620e0068bdd42aca9a3e162753c52ae9c94d71fcbf
- MD5 7a29487d2808603330ad03c79e9751ea
- SHA1 cebc61f298a5362de24fae5853fc080ef7ea47f2
- SHA512 a3e4df04a21b3ec5fe2d977d041010a7f26237852dcb41640e2f87aff3ab3d8311e6af683bb5b29bb542b01e7d675e7554119c33ef4b7149f916739e48be497d
- SSDEEP 6144:wEhfGkHBdZanRtjU9x9aygCSCpMW90KImQijnfbxL:j++d0j
- TLSH T134245D98136AC93DC2BE27BED0A611060BF0B217D503E74CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1