General
- Target WinLock.exe
- Size 209KB
- Sample260809-jk4fjshd85
- SHA256 93cf08dfc6da1b578ff776954af47196ef30924c32f5b7fcf3bb4c11a66b2492
- MD5 a443b73fc52f9ec4a3baac8447e9fb44
- SHA1 e18b4b6b54b6753b6ca72d854d2d0b88a69f75dc
- SHA512 d1d553b611768f58fca7bb9dcea8daec583a584717b63f0a3bd89d164b6e719dfb342ee8484df1039ccec0d536a20cc41bf5a83f1d906550e35ff383c77dcff6
- SSDEEP 6144:Gs8A/ehUOqx8PBmnRtQ0U6B97SCpMW90KImQijnCb1ewO:GPAwUOqx8PUjQQ
- TLSH T1212449981397897DD67D237ED0A1120907F56223C503F34E9EE5E4F89E2B3129B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinLock.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target WinLock.exe
- Size 209KB
- SHA256 93cf08dfc6da1b578ff776954af47196ef30924c32f5b7fcf3bb4c11a66b2492
- MD5 a443b73fc52f9ec4a3baac8447e9fb44
- SHA1 e18b4b6b54b6753b6ca72d854d2d0b88a69f75dc
- SHA512 d1d553b611768f58fca7bb9dcea8daec583a584717b63f0a3bd89d164b6e719dfb342ee8484df1039ccec0d536a20cc41bf5a83f1d906550e35ff383c77dcff6
- SSDEEP 6144:Gs8A/ehUOqx8PBmnRtQ0U6B97SCpMW90KImQijnCb1ewO:GPAwUOqx8PUjQQ
- TLSH T1212449981397897DD67D237ED0A1120907F56223C503F34E9EE5E4F89E2B3129B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories