General

  • Target
    goxlr-utility-1.2.4.zip
  • Size 79.2MB
  • Sample261009-q9gfmsbc86
  • SHA256 7a6e065b0dfd6152526b323a463a7448f89d160a15a1a1ad70772ae442b1e46a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      goxlr-utility-1.2.4/goxlr-utility-1.2.4.exe
    • Size 135.2MB
    • SHA256 768d570f7065b78880217f834b9e674ef1d521f8db79f45bf34cb28845ef5c85
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

MITRE ATT&CK Enterprise v16

Tasks