General
- Target 4lchecker.rar
- Size 85.1MB
- Sample260814-zekdgssscx
- SHA256 03ff4f58381fbcf671cde10c3483d4f54431f5d89d5890f70a4542446803b685
Score
7/10
Malware Config
Targets
-
- Target 4lchecker/LICENSES.chromium.html
- Size 9.0MB
- SHA256 dc2878d9bf6ef5fca45737536272a7a1877e0c6f89cb9578cb0f956781102986
Score3/10 -
- Target 4lchecker/d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
Score1/10 -
- Target 4lchecker/ffmpeg.dll
- Size 2.6MB
- SHA256 113ccc8e701157d0d59283baa5dc1fd3b0eae2571fd825084d7a4d58697a5ec2
Score1/10 -
- Target 4lchecker/libEGL.dll
- Size 470KB
- SHA256 01b8a8c2875ecb9979de339500ce0e0b7ecc3c5387053ce27bea51e6a09e2d72
Score1/10 -
- Target 4lchecker/libGLESv2.dll
- Size 7.7MB
- SHA256 fb6ea924fbb9417e4695ce414cdcbc299f13451dbedd2d9adb55479bf1cbf57f
Score1/10 -
- Target 4lchecker/ogjobcenter.exe
- Size 172.5MB
- SHA256 1fa93c3471c11dc8128998c662c705104e4528b98901b61c8a25216acda424c5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target 4lchecker/resources/app.asar
- Size 13.6MB
- SHA256 20f3b4a61f77917d667276a0d84c242ef5bb8795ebf24368cda3bcf669afb2b5
Score3/10 -
- Target 4lchecker/vk_swiftshader.dll
- Size 5.2MB
- SHA256 7005598f9bb8559101458ddaac77e3a23f9876c0a1aaf7136a11f2d1d5173448
Score1/10 -
- Target 4lchecker/vulkan-1.dll
- Size 938KB
- SHA256 45adc3dac19684ed3af159ae3914fbbf2426a879e5a4c1e678e3c9b451fab01a
Score1/10