Overview

overview

9

Static

static

3

Kirra_Lock.exe

windows10-2004-x64

Kirra_Lock.exe

windows11-ltsc_2024-x64

Resubmissions

09/09/2026, 16:24

260909-twcgbaxhmh9

09/09/2026, 16:20

260909-ttd75ayzds9

Sharing

Copy URL Twitter E-mail

General

  • Target
    Kirra_Lock.exe
  • Size 24.0MB
  • Sample260909-ttd75ayzds
  • SHA256 69a2ecd5029854bb6e17118bf5a770b435d1ac880574699d1484170f8d916edd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
adwaredefense_evasiondiscoveryexecutionpersistencepyinstallerransomwarespyware

Malware Config

Targets

    • Target
      Kirra_Lock.exe
    • Size 24.0MB
    • SHA256 69a2ecd5029854bb6e17118bf5a770b435d1ac880574699d1484170f8d916edd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Disables RegEdit via registry modification

      defense_evasion

    • Disables Task Manager via registry modification

      defense_evasion

    • Loads dropped DLL

    • Creates a new local user account

      Uses net.exe to create a new local user account, often for persistence or a backdoor account.

      persistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks