General
- Target LockerBuilder.rar
- Size 867KB
- Sample260910-ycaktsvelh
- SHA256 bcf5ba1ac9037f4f72f6cb26ce0493f1bff8ec2be7a9cc1c87602bc900ebcc84
- MD5 f259823705593aa167257d2619778e40
- SHA1 d4af3f10e0f6fabeefc1a67c99cf9e6fb2cb2a68
- SHA512 49084f6039bc3b7a7e23e63413898e633006bf2cc23be76def18ffd0722469e09ed5e23ad9604b20c9ead17ee243365e45152abbfa8d69e0f176c3f9877ce8ab
- SSDEEP 24576:rLpPEH4tBEQ8Ga4u6rp+Z1hRsGfYofK4zZ1ivH:rL1iQHlu6kThzYZ4zo
- TLSH T1A71533990D72F9345F0356742A7399F3ED433D698A0844ACFE8A923252164C17BFBA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LockerBuilder/LockerBuilder.exe
Resource
win10ltsc2021-20260513-en
14 signatures
300 seconds
Behavioral task
behavioral2
Sample
LockerBuilder/WinLock.exe
Resource
win10ltsc2021-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target LockerBuilder/LockerBuilder.exe
- Size 10KB
- SHA256 33b9d5e64e7fe70168c77cac081b9192a98e6e9f6eb331c7cef16800a0bdb55f
- MD5 af428b8bd8764c6482a9ed981c4235e0
- SHA1 ceaf8f128dbe6a0f1b52110201e94b0bff11d91e
- SHA512 b09bf8016c2e6e1110770085d3251581555c0ffd9d9f78fc05b0b8787a3538106783ac1a410890897093bf28e2bd2481bb05d7af5948634ad5ff80abe86d4ce7
- SSDEEP 192:qeyshiK724jLS3x3jnZ8DTN1ECQLsxE/2Ga0xSo08fdm:q8s624j09Z8TEBLsxBMSorfd
- TLSH T18E22085AA7E8C335E8FA4B722CB315400373BA296966DB5F5CCD518F1E6374006A37A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
-
- Target LockerBuilder/WinLock.exe
- Size 209KB
- SHA256 212404ec25a0eefa2db896e69f82908d848a17116ef6a0eb83d7e41793bf4593
- MD5 75ba24493fb2c421ae7af148483449b1
- SHA1 e1bf74d6b52579d039e1c2cc6d0a3fc784c1f196
- SHA512 ad1f6f09a5a21e9de4e98a812fdf87b0790d8231662ed01f001699c19bbe05b8735160830b0e752cc74c0ddd5a0184fb46578534b7b913d86dca183e30701733
- SSDEEP 6144:RM8A/ehUOqx8PB6nRtQ0UOB97SCpMW90KImQijnCbJewO:RvAwUOqx8PsjQE
- TLSH T12B2449981397897DD67D237ED0A1120907F56223C503F34E9EE5E4F89E2B3129B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1