General
- Target MaxLocker.exe
- Size 936KB
- Sample260830-lv9fnasane
- SHA256 a17f73a02981b55e821f5ee7396590bb0d65e71aad94b2806b10f9e86c9358f7
- MD5 ca59ef68cad788cef58c8ff8812dc5cb
- SHA1 a183e9b0e0dc0674d2495b6428f184b0fd9eea01
- SHA512 7343a2135312c8392c93c92281073a447d0a6e1c1701cbea03bf873748f6b305bd88194e5612437ccd0f2adcf067658ffb2b87f91b9849193c8e7abf6dd92201
- SSDEEP 24576:5pXA4gQoRbeIzW4iEZ31m2Rx2+siA/s8:5pcDiEB1vRYd/
- TLSH T17215F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MaxLocker.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target MaxLocker.exe
- Size 936KB
- SHA256 a17f73a02981b55e821f5ee7396590bb0d65e71aad94b2806b10f9e86c9358f7
- MD5 ca59ef68cad788cef58c8ff8812dc5cb
- SHA1 a183e9b0e0dc0674d2495b6428f184b0fd9eea01
- SHA512 7343a2135312c8392c93c92281073a447d0a6e1c1701cbea03bf873748f6b305bd88194e5612437ccd0f2adcf067658ffb2b87f91b9849193c8e7abf6dd92201
- SSDEEP 24576:5pXA4gQoRbeIzW4iEZ31m2Rx2+siA/s8:5pcDiEB1vRYd/
- TLSH T17215F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger