General
- Target lock_screen.exe
- Size 11.1MB
- Sample260604-qaccmsgs2j
- SHA256 fb1be379cd84d48d0daf52c68ab880cefda8d47d5d69615908c83d2f71da583d
- MD5 16ca1c76e5077a6353365f5a06536f8e
- SHA1 597f95e4a9f3a1ade8359df4478b2281c4962014
- SHA512 db2963f2d3b62b249e6cb712045f79e1b735990f8a3aa243fba6a6f99b0e8922a10b46d7cc160b199642500077a1f1aea3f8fcebb05df77c9ae772c7ab76c7dd
- SSDEEP 196608:YG2ew0W8UADNTwhLGeurHMuhHToAUPNfGU5vXvLu2TuG9Qk0ax8lLESdI7Z+CS:Y4W8kLVuJhHTodRGkXT9v9AaxIngAC
- TLSH T1F5C6339677C508E8FE5FA73844C20A2653E678550760C2D74BE90E922E731E8FE35B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
lock_screen.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
lock_screen.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target lock_screen.exe
- Size 11.1MB
- SHA256 fb1be379cd84d48d0daf52c68ab880cefda8d47d5d69615908c83d2f71da583d
- MD5 16ca1c76e5077a6353365f5a06536f8e
- SHA1 597f95e4a9f3a1ade8359df4478b2281c4962014
- SHA512 db2963f2d3b62b249e6cb712045f79e1b735990f8a3aa243fba6a6f99b0e8922a10b46d7cc160b199642500077a1f1aea3f8fcebb05df77c9ae772c7ab76c7dd
- SSDEEP 196608:YG2ew0W8UADNTwhLGeurHMuhHToAUPNfGU5vXvLu2TuG9Qk0ax8lLESdI7Z+CS:Y4W8kLVuJhHTodRGkXT9v9AaxIngAC
- TLSH T1F5C6339677C508E8FE5FA73844C20A2653E678550760C2D74BE90E922E731E8FE35B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Disables Task Manager via registry modification
-
Loads dropped DLL