General
- Target WinLock.exe
- Size 210KB
- Sample260905-sn41xsel81
- SHA256 9a2e7103e38ad662546486e0f8c77e398cdd15e0f644fec41ad4b89e34a9644f
- MD5 6061e68c80213e8d5ea3f1b041e04238
- SHA1 3b7e0d20070f96de7ec1acac16713e96329d4bb6
- SHA512 e14993430d142accd0712541df8fb806290bf776ff8993bce3ae97515c4fa68a11270c1d2babdd989c36e19676ae1ed76f163287d5d2226ca3031234979f628b
- SSDEEP 6144:qPEhfGkHBdZ/nRtjUOx9aygCSCpMW90KImQijnfbBLc:qU++dVj4
- TLSH T165244D98136AC93DC2BE27BED0A611060BF1B217D503E74CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinLock.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinLock.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target WinLock.exe
- Size 210KB
- SHA256 9a2e7103e38ad662546486e0f8c77e398cdd15e0f644fec41ad4b89e34a9644f
- MD5 6061e68c80213e8d5ea3f1b041e04238
- SHA1 3b7e0d20070f96de7ec1acac16713e96329d4bb6
- SHA512 e14993430d142accd0712541df8fb806290bf776ff8993bce3ae97515c4fa68a11270c1d2babdd989c36e19676ae1ed76f163287d5d2226ca3031234979f628b
- SSDEEP 6144:qPEhfGkHBdZ/nRtjUOx9aygCSCpMW90KImQijnfbBLc:qU++dVj4
- TLSH T165244D98136AC93DC2BE27BED0A611060BF1B217D503E74CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories