Overview

overview

7

Static

static

3

Winlocker-main.zip

windows10-2004-x64

1

Winlocker-main.zip

windows10-ltsc_2021-x64

1

Winlocker-...CK.exe

windows10-2004-x64

7

Winlocker-...CK.exe

windows10-ltsc_2021-x64

7

main.pyc

windows10-2004-x64

3

main.pyc

windows10-ltsc_2021-x64

3

Winlocker-...DME.md

windows10-2004-x64

3

Winlocker-...DME.md

windows10-ltsc_2021-x64

3

Winlocker-...on.ico

windows10-2004-x64

3

Winlocker-...on.ico

windows10-ltsc_2021-x64

3

Winlocker-...in.pyw

windows10-2004-x64

3

Winlocker-...in.pyw

windows10-ltsc_2021-x64

3

Winlocker-...nd.mp3

windows10-2004-x64

6

Winlocker-...nd.mp3

windows10-ltsc_2021-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Winlocker-main.zip
  • Size 12.6MB
  • Sample260825-t2sqgswcjb
  • SHA256 737f7cd1ff80e85b39da8bf48d28d012e4336f1e264e4d4a06bdbcf43109fdfb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionpyinstaller

Malware Config

Targets

    • Target
      Winlocker-main.zip
    • Size 12.6MB
    • SHA256 737f7cd1ff80e85b39da8bf48d28d012e4336f1e264e4d4a06bdbcf43109fdfb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Winlocker-main/CSGOHACK.exe
    • Size 12.7MB
    • SHA256 d9b9850dc6bcf453df50c4df3476b403788cb3a564479ca5f3b9924e12aba2fa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Loads dropped DLL

    behavioral3behavioral4
    • Target
      main.pyc
    • Size 2KB
    • SHA256 06a589d13e13304a50b8c3bdd01fb48cca62d2a680c60054c07c01580282c9e5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      Winlocker-main/README.md
    • Size 179B
    • SHA256 7f8d6abc9fe64f31d2785a0ee121f60dedbf4301f0dc64080a274381dbc3f619
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      Winlocker-main/icon.ico
    • Size 5KB
    • SHA256 5809dfb5bab66431ec39eb634fc5bd7746df98647fbc82425cc884a5610eac03
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      Winlocker-main/main.pyw
    • Size 1KB
    • SHA256 b2bf6c86b39ed8abfae05648ceb7ed5c50cf4c7249c45a9c05a26dc9c098ccc3
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      Winlocker-main/sound.mp3
    • Size 59KB
    • SHA256 b4c71a91687021860f13751c1e8ae856d7d8eb330bd25fe5e405e040ef7fd2aa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks