29ea8a6f730145b6ef52cf513a06ec3467e8f44e05508f14d2e59b4fb30c764a | Triage™

Login
Reports

Overview

overview

6

Static

static

3

WinLock.exe

windows10-ltsc_2021-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
WinLock.exe
Size 211KB
Sample261015-ncs23ade23
SHA256 29ea8a6f730145b6ef52cf513a06ec3467e8f44e05508f14d2e59b4fb30c764a
MD5 788068551d844ca6b66b58db8871ed3c
SHA1 3b255b73c3aba49458aedc1b6da16619a2db4868
SHA512 90492028b48d01d95368b4f52ca6b51b5c56342be28bdf70b8de7e3ef6a53b971655211808638fded7ef96227e01ead3a26b331e725ac96d3e3c64aa79ec91d4
SSDEEP 6144:SEhfGkHBdZ1nRtjU1x9aygCSCpMW90KImQijnfbYL:l++dXj
TLSH
T103244D98136AC93DC2BD27BED0A605060BF5B217D603E74CAFF8A0E66D27311B715A47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

WinLock.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

8 signatures

900 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  WinLock.exe
- Size 211KB
- SHA256 29ea8a6f730145b6ef52cf513a06ec3467e8f44e05508f14d2e59b4fb30c764a
- MD5 788068551d844ca6b66b58db8871ed3c
- SHA1 3b255b73c3aba49458aedc1b6da16619a2db4868
- SHA512 90492028b48d01d95368b4f52ca6b51b5c56342be28bdf70b8de7e3ef6a53b971655211808638fded7ef96227e01ead3a26b331e725ac96d3e3c64aa79ec91d4
- SSDEEP 6144:SEhfGkHBdZ1nRtjU1x9aygCSCpMW90KImQijnfbYL:l++dXj
- TLSH
  T103244D98136AC93DC2BD27BED0A605060BF5B217D603E74CAFF8A0E66D27311B715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence
- Adds Run key to start application
  persistence
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy