General
- Target goxlr-utility-1.2.4.zip
- Size 79.2MB
- Sample261009-q9gfmsbc86
- SHA256 7a6e065b0dfd6152526b323a463a7448f89d160a15a1a1ad70772ae442b1e46a
- MD5 a32d446af20df8af2cb27bc14ab98be8
- SHA1 7f1a0a6ea91140bc92bf1cd1dbb01b04f04f308a
- SHA512 703beeadf98d72f7156236dc83a4f132431d9d08e332c50327c637a4df74db1b0743d4c3728e52ad5d932b2057dbed804ee80b675bd70bcf7bb401cdf3e2b2ab
- SSDEEP 1572864:6qpNB+VQZb+PVx/frHSt6lshX0KAKo5UscXj5RcogC/q28DKLAqDZy1i2NW5QhVm:6qOmyf++oHAb5mfcZ+iaDZV2Nxmj9
- TLSH T1950833F7BEF6A5C60A98441EDC746963D73262A4B2BB0C4DA554469B8CEF5FC23E3001
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
goxlr-utility-1.2.4/goxlr-utility-1.2.4.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
goxlr-utility-1.2.4/goxlr-utility-1.2.4.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target goxlr-utility-1.2.4/goxlr-utility-1.2.4.exe
- Size 135.2MB
- SHA256 768d570f7065b78880217f834b9e674ef1d521f8db79f45bf34cb28845ef5c85
- MD5 5bb3f609a5fc2eea4f693434863e1ab2
- SHA1 3e3bbbe6d2f819af2a07d7e5d8df24a38e774a65
- SHA512 d268347a35a2e4b16d68bbd795fcee7add06028c9d781e45ad61ac8fe3578baf25d72711b1b5f927063fec7bf20ec14eb5533d04f4ad09495700b74652ea51ab
- SSDEEP 1572864:iU1XB/AGJVADGs2w6AuZBz3EugWj+y6lHpuqjFstwaVixPjiE0Mxe:j9NkKs2wM1Ep8uHjFTaV+I+e
- TLSH T16F68BF13B3E70595E8FBDA7196E652236932BC066F3085DF324C07261F73AE05A7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Uses WMI to collect hardware manufacturer information
Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.