Overview

overview

8

Static

static

1

GoXLR App ...er.exe

windows10-2004-x64

8

GoXLR App ...er.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    GoXLR App V1.6.4.014 Installer.exe
  • Size 40.1MB
  • Sample261027-mkfk9sds7m
  • SHA256 cf7ec4f7af9fcc2169caf7786e7afba6615a28eb93afa55459a30bb4c3c436fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryinstallerspywaretrojanupx

Malware Config

Targets

    • Target
      GoXLR App V1.6.4.014 Installer.exe
    • Size 40.1MB
    • SHA256 cf7ec4f7af9fcc2169caf7786e7afba6615a28eb93afa55459a30bb4c3c436fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryinstallerspywaretrojanupx

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks