Overview

overview

10

Static

static

10

sample.exe

windows10-ltsc_2021-x64

10

Resubmissions

05/10/2026, 19:36

261005-ybdk4abc2910

05/10/2026, 11:51

261005-n1awds1hqd10

29/09/2026, 09:16

260929-k8l2vawdrc8

Sharing

Copy URL Twitter E-mail

General

  • Target
    sample.bin
  • Size 11.9MB
  • Sample261005-ybdk4abc29
  • SHA256 c1dfd3712d6f927acf98a78f1b77367d0b57aefbcd6ea8a7120d61a2b8a76525
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
winloldefense_evasiondiscoverypersistenceprivilege_escalationrat

Malware Config

Extracted

Family

  • winlol

C2

  • http://workinghardo.link:80

Attributes
  • agent_key

    55yf5Lit5ZCI5qyi5aSp5LiL56ys5LiA

Targets

    • Target
      sample.bin
    • Size 11.9MB
    • SHA256 c1dfd3712d6f927acf98a78f1b77367d0b57aefbcd6ea8a7120d61a2b8a76525
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoverywinlolpersistenceprivilege_escalationrat

    • Detects WinLol Golang WebRTC remote desktop RAT

    • Family: WinLol

      WinLol is a Windows RAT written in Golang.

      ratwinlol

    • Modifies Windows Firewall

      defense_evasion

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks