8ec2c333dbf6c9d647de2cdb818146d0984562d0f1cf02fff3e8be04e9ef3c4d | Triage™

Login
Reports

Overview

overview

Static

static

3

WinLock.exe

windows10-2004-x64

WinLock.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
WinLock.exe
Size 86KB
Sample260825-v1xtgsab66
SHA256 8ec2c333dbf6c9d647de2cdb818146d0984562d0f1cf02fff3e8be04e9ef3c4d
MD5 5dfc1a254033df3a7b19d1c527d64198
SHA1 bd36e6e3b55d3d54673c2342426367baec98ed83
SHA512 95160ee4c30d52615f80909dc4ea8079e15ab9979a76232bde434a6d45b9cc3ff94af77be639e8bc9f7bf487016c095b974d895539deda68d410e6ce84ab53a5
SSDEEP 1536:TiLL/tdHIoM8eqnQmEsRtjtQtYPUQtDAw2Gow8gY9bkr9PPpCV/d5P+:+31xq2nQEtQ+P+iyZ9bkrFPA/6
TLSH
T111835A0033E94717E1BE5AB65563B24402FFA6965532CF5EAED890CD27E3B409720BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

WinLock.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

WinLock.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  WinLock.exe
- Size 86KB
- SHA256 8ec2c333dbf6c9d647de2cdb818146d0984562d0f1cf02fff3e8be04e9ef3c4d
- MD5 5dfc1a254033df3a7b19d1c527d64198
- SHA1 bd36e6e3b55d3d54673c2342426367baec98ed83
- SHA512 95160ee4c30d52615f80909dc4ea8079e15ab9979a76232bde434a6d45b9cc3ff94af77be639e8bc9f7bf487016c095b974d895539deda68d410e6ce84ab53a5
- SSDEEP 1536:TiLL/tdHIoM8eqnQmEsRtjtQtYPUQtDAw2Gow8gY9bkr9PPpCV/d5P+:+31xq2nQEtQ+P+iyZ9bkrFPA/6
- TLSH
  T111835A0033E94717E1BE5AB65563B24402FFA6965532CF5EAED890CD27E3B409720BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy