General
- Target WinLock.exe
- Size 419KB
- Sample260808-rf6n4sgl7w
- SHA256 b5caef70ed01fd4af93546ea754a63ab540f65ee09860de48ad2a125a59fa597
Score
10/10
Malware Config
Targets
-
- Target WinLock.exe
- Size 419KB
- SHA256 b5caef70ed01fd4af93546ea754a63ab540f65ee09860de48ad2a125a59fa597
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1