General
- Target WinLock.exe
- Size 419KB
- Sample260808-rb5k9agk9s
- SHA256 0689f2af987344aa084491e273462328c03012ab6bb75c3e4e81dd7fe49029ae
Score
10/10
Malware Config
Targets
-
- Target WinLock.exe
- Size 419KB
- SHA256 0689f2af987344aa084491e273462328c03012ab6bb75c3e4e81dd7fe49029ae
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1