Overview

overview

10

Static

static

tmp.exe

windows7-x64

8

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    tmp

  • Size

    784KB

  • Sample

    221019-rg9r6abbc5

  • MD5

    fb0a9f453cc6cf88013aadd259a0d9be

  • SHA1

    ce1bdf4c9847f106b45d9fe1ee08fbf5dc1b4901

  • SHA256

    bc0537fefe3aa3f33b174df04a1b1e0d1d837f91c0350b0f5a9cacfcde5f9ef5

  • SHA512

    0ff9b366a7ed33d58d2204c298ef8757898788d25b806006d803aca9dc9ceeec1968e18b328d33859ae862ee527f8145b0868577f535ecdedb8d50f64486ac16

  • SSDEEP

    24576:tPqILEE7n98f13ufdevBgEaqrxSs5zPhZ5FRG:sDS+DvmE79SsdPhZk

Score
10/10
lgoogloaderdownloaderpersistence

Malware Config

Targets

    • Target

      tmp

    • Size

      784KB

    • MD5

      fb0a9f453cc6cf88013aadd259a0d9be

    • SHA1

      ce1bdf4c9847f106b45d9fe1ee08fbf5dc1b4901

    • SHA256

      bc0537fefe3aa3f33b174df04a1b1e0d1d837f91c0350b0f5a9cacfcde5f9ef5

    • SHA512

      0ff9b366a7ed33d58d2204c298ef8757898788d25b806006d803aca9dc9ceeec1968e18b328d33859ae862ee527f8145b0868577f535ecdedb8d50f64486ac16

    • SSDEEP

      24576:tPqILEE7n98f13ufdevBgEaqrxSs5zPhZ5FRG:sDS+DvmE79SsdPhZk

    Score
    10/10
    persistencelgoogloaderdownloader

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

      downloaderlgoogloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks