General
- Target WinLock.exe
- Size 209KB
- Sample260814-shcdqawdlc
- SHA256 64bebe9387898a8ba30027d1c327b5671d369e8a40beebd46ea44500f1dc2088
- MD5 461295a93f98a43c6335b0087b505c0e
- SHA1 46f04c90ecb569a3a81a109aed1b858464fc1700
- SHA512 dbf93c8bb507c148b91750b63921487854fdc9cbff13395b3987d8714808509dd91a65451381a48470e7804a51e1228ac3b523c2ca6ebd64c0d03727aaaec051
- SSDEEP 6144:OEhfGkHBdZMnRtjUmx9aygCSCpMW90KImQijnfbaL:5++dyj
- TLSH T168245C98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock.exe
Resource
win10ltsc2021-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target WinLock.exe
- Size 209KB
- SHA256 64bebe9387898a8ba30027d1c327b5671d369e8a40beebd46ea44500f1dc2088
- MD5 461295a93f98a43c6335b0087b505c0e
- SHA1 46f04c90ecb569a3a81a109aed1b858464fc1700
- SHA512 dbf93c8bb507c148b91750b63921487854fdc9cbff13395b3987d8714808509dd91a65451381a48470e7804a51e1228ac3b523c2ca6ebd64c0d03727aaaec051
- SSDEEP 6144:OEhfGkHBdZMnRtjUmx9aygCSCpMW90KImQijnfbaL:5++dyj
- TLSH T168245C98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories