Overview

overview

7

Static

static

3

Klar.gg_Lite.exe

windows7-x64

7

Klar.gg_Lite.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Klar.gg_Lite.exe

  • Size

    21.8MB

  • Sample

    240527-yya4gshg27

  • MD5

    5b8cb613ff041a5e38c03c9f3ff44d97

  • SHA1

    37f2f8cfc0d78556761576bca6b77360a659444b

  • SHA256

    cde708b755752e85111895dcc3490764b72f0b7f9eecb20bed90f1bbeabfbcf8

  • SHA512

    39542fe353d9872f1334964808b48586da5986e364858ea6c35a5de7c8f8c1d2e8fcfdd38ed1f233f6e2b2dd99cd300d204b972210f0bae3aecbbc7880fc230c

  • SSDEEP

    393216:9kBJ5vfbL+9qzy/m6ZZMV65EdAWXOQoLdCk+7q3n1t4cU2P/fGBXiWCNva:aBJNf3+9qwXX2AWX5oLv3n1CUXuYVNva

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      Klar.gg_Lite.exe

    • Size

      21.8MB

    • MD5

      5b8cb613ff041a5e38c03c9f3ff44d97

    • SHA1

      37f2f8cfc0d78556761576bca6b77360a659444b

    • SHA256

      cde708b755752e85111895dcc3490764b72f0b7f9eecb20bed90f1bbeabfbcf8

    • SHA512

      39542fe353d9872f1334964808b48586da5986e364858ea6c35a5de7c8f8c1d2e8fcfdd38ed1f233f6e2b2dd99cd300d204b972210f0bae3aecbbc7880fc230c

    • SSDEEP

      393216:9kBJ5vfbL+9qzy/m6ZZMV65EdAWXOQoLdCk+7q3n1t4cU2P/fGBXiWCNva:aBJNf3+9qwXX2AWX5oLv3n1CUXuYVNva

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks