General
- Target WinLock.exe
- Size 209KB
- Sample260826-kmltyssvhy
- SHA256 0d98738946c764a58d8c56e494d61669550fa5d58c97fb00a363291243978244
- MD5 49da2f21a642f99c0334e7eee7e02a47
- SHA1 0f0135a4889b0a8a13dbd1ff116e8eb5a57e9025
- SHA512 25256d3815ef69843c6749837653286e4722800b2a78c9c582d90d79dc694081b116ace60381ad9eb1590d43f4f34c0726381d591743b88546f13a3a2d49402a
- SSDEEP 6144:Gs8A/ehUOqx8PBmnRtQ0U6B97SCpMW90KImQijnCbNewO:GPAwUOqx8PUjQQ
- TLSH T1FE2449981397897DD63D237ED0A1120907F56223C503F34E9EE5E4F89E2B3529B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinLock.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target WinLock.exe
- Size 209KB
- SHA256 0d98738946c764a58d8c56e494d61669550fa5d58c97fb00a363291243978244
- MD5 49da2f21a642f99c0334e7eee7e02a47
- SHA1 0f0135a4889b0a8a13dbd1ff116e8eb5a57e9025
- SHA512 25256d3815ef69843c6749837653286e4722800b2a78c9c582d90d79dc694081b116ace60381ad9eb1590d43f4f34c0726381d591743b88546f13a3a2d49402a
- SSDEEP 6144:Gs8A/ehUOqx8PBmnRtQ0U6B97SCpMW90KImQijnCbNewO:GPAwUOqx8PUjQQ
- TLSH T1FE2449981397897DD63D237ED0A1120907F56223C503F34E9EE5E4F89E2B3529B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories