General
- Target Release_v3_0_3.zip
- Size 3.2MB
- Sample260702-3gl7msc15n
- SHA256 986c2538c7ddd48a5833e96ce4c6b53168eb0c2f2b90bef15c1e4e2e7a7c7791
Score
8/10
Malware Config
Targets
-
- Target LGSTray.exe
- Size 5.6MB
- SHA256 f2bf538f4fa35b3bac8488b392ae9339840eeeafb6d534df740f69ca499dd0e6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target LGSTrayHID.exe
- Size 2.9MB
- SHA256 22ea509fee4035230b2998554c41b24e7ddd5bb5fff8b0cfb6e044b07d64a22f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target hidapi.dll
- Size 166KB
- SHA256 38bda32f593c054cacaf95bebce36f9bacc7fbd0740f7b6f72f6d368fbc84b4d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.