General
- Target WinLock.exe
- Size 741KB
- Sample260825-pg9faaysc1
- SHA256 7e5fddbc42b801ec0a377fa1e563e55565fc6972ca3fd7d8fc8d28061112774e
- MD5 a478a7629df3ea312ad9c21dc1272969
- SHA1 a260b9ffc468fea1a9b165c9c009ba9e4841797e
- SHA512 1f6d9ad81314027b3ac65b53c6211f7873110899f6bc9e982ec1c3cb666ed461219a51edcbc41990acf5baf6e496f748a07fcd2fd23eface22f5a46103441cc7
- SSDEEP 12288:e8AwUOqxaP3dWyD7j5Xx8ExlgZ6MmUs3jXcyigWZKbSw5HvOSG1Uhfvj:TrdjD7DtxIPs3jNB2w5PqUF
- TLSH T152F4DF5C0A564B28D12C777AF055538406F45232A483D70BCEB4A4B0BA27787EAE5FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinLock.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target WinLock.exe
- Size 741KB
- SHA256 7e5fddbc42b801ec0a377fa1e563e55565fc6972ca3fd7d8fc8d28061112774e
- MD5 a478a7629df3ea312ad9c21dc1272969
- SHA1 a260b9ffc468fea1a9b165c9c009ba9e4841797e
- SHA512 1f6d9ad81314027b3ac65b53c6211f7873110899f6bc9e982ec1c3cb666ed461219a51edcbc41990acf5baf6e496f748a07fcd2fd23eface22f5a46103441cc7
- SSDEEP 12288:e8AwUOqxaP3dWyD7j5Xx8ExlgZ6MmUs3jXcyigWZKbSw5HvOSG1Uhfvj:TrdjD7DtxIPs3jNB2w5PqUF
- TLSH T152F4DF5C0A564B28D12C777AF055538406F45232A483D70BCEB4A4B0BA27787EAE5FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories