General
- Target MaxLocker.exe
- Size 936KB
- Sample260919-mw82ysec84
- SHA256 20ff45671f843b97ac4f1307fb31f26b475397452e594e9dfbc143fdf386fbdb
- MD5 5735f85f62056e8d83b985df2750db92
- SHA1 a346b2052125a98ae9373eccfeb8f0580f10379d
- SHA512 fc47758f51fd19666732e744a2baf414ecc41e1f6f9da988bdb42907ef45d5f2694f7efc2d6c1b6312ea1212d71754a150ffc4a17e6dae02dffa6da9477ea325
- SSDEEP 24576:5pXA4GQoRbeIzW4iEZ31m2Rx2+siA/s8:5pSDiEB1vRYd/
- TLSH T15415F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MaxLocker.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
MaxLocker.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target MaxLocker.exe
- Size 936KB
- SHA256 20ff45671f843b97ac4f1307fb31f26b475397452e594e9dfbc143fdf386fbdb
- MD5 5735f85f62056e8d83b985df2750db92
- SHA1 a346b2052125a98ae9373eccfeb8f0580f10379d
- SHA512 fc47758f51fd19666732e744a2baf414ecc41e1f6f9da988bdb42907ef45d5f2694f7efc2d6c1b6312ea1212d71754a150ffc4a17e6dae02dffa6da9477ea325
- SSDEEP 24576:5pXA4GQoRbeIzW4iEZ31m2Rx2+siA/s8:5pSDiEB1vRYd/
- TLSH T15415F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger