00543b36fb1d3283369a5fda15876473b0ce46e28977a9202c2dfab982d0d704 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

WinLock1.exe

windows10-ltsc_2021-x64

6

Resubmissions

24/10/2026, 00:20

261024-amsbma1xay6

20/10/2026, 16:07

261020-tk3jcsssdw6

Sharing

Copy URL Twitter E-mail

General

Target
локер.zip
Size 91KB
Sample261020-tk3jcsssdw
SHA256 00543b36fb1d3283369a5fda15876473b0ce46e28977a9202c2dfab982d0d704
MD5 e09344b0de4321d8f85a54dd254a28f8
SHA1 86306e01eaff06cc3106c0b7f09cca0ca7ad8235
SHA512 1509bafb987789bf2138727312dd87c910ae27b0b5133dd017b24a472fdd09238e26c7e31c23e97e97d44433b7ba89411a0fb745a855bd4ae777920b9bfef4ec
SSDEEP 1536:9bfjVWREDhYnvjrrmOQyvuvwQ+Cp2KnGn1dRAa/BcWw2sv4ma6nLcZOIO0Mg:9fVewhYvvKO/uwQrYsGvKagv6kcZZO09
TLSH
T1DC93127EE18FE912A31EC13F78E55FB07E0D06C8AB6359E4528DD2C506D9DDE9361A00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

WinLock1.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

8 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  WinLock1.exe
- Size 209KB
- SHA256 63e7fd8f9e880643d8fd7c898bfb81f40dcb5daaf865088edfd825f17abf407a
- MD5 2ce32004b68af88ffe4cf1431960ee8f
- SHA1 21af4cde93810f8be5bfd3c3e71863468ed17073
- SHA512 16e1d15dfef43174a4fbb17eaeff2d197cad9aef56ed82ed1ba9835c01fe91895e930b1dec37d71fd4d8e1b16edcefa365e39a4eaa389a2c805c4b975bb14b8d
- SSDEEP 6144:NEhfGkHBdZynRtjUax9aygCSCpMW90KImQijnfbgL:S++doj
- TLSH
  T166244D98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence
- Adds Run key to start application
  persistence
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy