General
- Target locker.exe
- Size 677KB
- Sample260919-phkhjsz1ew
- SHA256 21b68a41377903e8b87a6de8fcfd1d75fef827fa960c204b55e28503f1fe50fd
- MD5 8e8847b337ed66f537973e029d3642c1
- SHA1 16a087709c17e1d7653aeeacaced98d49233a9ba
- SHA512 1f5dae8e29f45152d1a10d587b0422cd949f2bede39f805594707ca17aa83b3b259854bbc8fbdc950c568f745a11e35bbdbaec46062a3d1bf15d29243ed0dce4
- SSDEEP 6144:++t5qHW9Km7+jVgLUNvG04mZeuXACtH14N86GdJ5ukTe86BBHUWq+9yN86IpKIGY:QWkV/XACt+N+KfSHd6fXQFSmrQ0e
- TLSH T124E4D543269B1DBADDD32F7861DB233AAB35FD608BBA4A6B8544C2314C131D06D2FB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
locker.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
locker.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target locker.exe
- Size 677KB
- SHA256 21b68a41377903e8b87a6de8fcfd1d75fef827fa960c204b55e28503f1fe50fd
- MD5 8e8847b337ed66f537973e029d3642c1
- SHA1 16a087709c17e1d7653aeeacaced98d49233a9ba
- SHA512 1f5dae8e29f45152d1a10d587b0422cd949f2bede39f805594707ca17aa83b3b259854bbc8fbdc950c568f745a11e35bbdbaec46062a3d1bf15d29243ed0dce4
- SSDEEP 6144:++t5qHW9Km7+jVgLUNvG04mZeuXACtH14N86GdJ5ukTe86BBHUWq+9yN86IpKIGY:QWkV/XACt+N+KfSHd6fXQFSmrQ0e
- TLSH T124E4D543269B1DBADDD32F7861DB233AAB35FD608BBA4A6B8544C2314C131D06D2FB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Privilege Escalation
Account Manipulation
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1