General
- Target WinLock.exe
- Size 493KB
- Sample260907-mrb7esvdlc
- SHA256 d5baba635261fbddb2829846a93c3b0b1b68ce4db345f68743b8c720d734128a
Score
10/10
Malware Config
Targets
-
- Target WinLock.exe
- Size 493KB
- SHA256 d5baba635261fbddb2829846a93c3b0b1b68ce4db345f68743b8c720d734128a
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1