General

  • Target
    17082026_1534_17082026_KGLWIN_V3.66_200706 _EN_.zip
  • Size 6.9MB
  • Sample260817-szvxdstdme
  • SHA256 61caaf3a6422af4b4523b204d6372eb9aebd3e43c4c93a36e0ff8964044fc6c2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      KGLWIN_V3p66_200706.exe
    • Size 7.7MB
    • SHA256 6403c5ba82eb98d82a2a7e318faf41b7286ef538517ba6328c3ea70068365d2a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks