General
- Target WinLock.exe
- Size 741KB
- Sample260825-pmtl1ssbrd
- SHA256 a99a747b7e0458b4cbcaa94d9b063edd17f112ca21e947439bf2dbab95d61791
- MD5 35261fe47916dedc5ddcc6e75408250b
- SHA1 a36acd9720240b5e89c48fb4cbcb70ee40026857
- SHA512 29ff1050eaa01135f15faff7f2c157555d2911e2e0cfb3e01e7e7074b1c937b2f1be0bd892e0eefecad0daaf39790b3607fbd8040fc85966dcd216db1c267d3f
- SSDEEP 12288:egAwUOqxaPNJWyD7j5Xx8ExlgZ6MmUs3jXcyigWZKbSw5HvOSG1Uhfvj:rJJjD7DtxIPs3jNB2w5PqUN
- TLSH T1B2F4DF5C0A564B28D52C777AF055438406F45232A483D70BCEB4A4B0BA27787EAE5FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock.exe
Resource
win10ltsc2021-20260513-fr
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
WinLock.exe
Resource
win11ltsc2024-20260709-fr
8 signatures
900 seconds
Malware Config
Targets
-
- Target WinLock.exe
- Size 741KB
- SHA256 a99a747b7e0458b4cbcaa94d9b063edd17f112ca21e947439bf2dbab95d61791
- MD5 35261fe47916dedc5ddcc6e75408250b
- SHA1 a36acd9720240b5e89c48fb4cbcb70ee40026857
- SHA512 29ff1050eaa01135f15faff7f2c157555d2911e2e0cfb3e01e7e7074b1c937b2f1be0bd892e0eefecad0daaf39790b3607fbd8040fc85966dcd216db1c267d3f
- SSDEEP 12288:egAwUOqxaPNJWyD7j5Xx8ExlgZ6MmUs3jXcyigWZKbSw5HvOSG1Uhfvj:rJJjD7DtxIPs3jNB2w5PqUN
- TLSH T1B2F4DF5C0A564B28D52C777AF055438406F45232A483D70BCEB4A4B0BA27787EAE5FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories