General
- Target MaxLocker.exe
- Size 936KB
- Sample261024-g82krags91
- SHA256 d844646320e2670e75ff57d0778a144483109302db118f59d3643c8d81298c23
Score
10/10
Malware Config
Targets
-
- Target MaxLocker.exe
- Size 936KB
- SHA256 d844646320e2670e75ff57d0778a144483109302db118f59d3643c8d81298c23
Score10/10-
Modifies WinLogon for persistence
-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Debugger Evasion
1Indicator Removal
1Clear Persistence
1Modify Registry
1Virtualization/Sandbox Evasion
2