Overview

overview

10

Static

static

file.exe

windows7-x64

8

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    882KB

  • Sample

    221103-1hl7xsfed6

  • MD5

    848a756241f8b1b975173be778cfbf43

  • SHA1

    74b24b949d699880da52c28365e979068aafd032

  • SHA256

    9c9b326ea0ae9aec4786fbb1ecd3522d31ea652a7658137c5a9c5d07df7b0c87

  • SHA512

    b551fff842ddda81e9bf1ae15df83291ef8f0a72a0667f1a1c04e87119dd0a20990f72dab070f1238b01afe95d9b836871cd8c834c117f9e96ddce8fd8e47935

  • SSDEEP

    24576:ML4tDfd3tMCuv2iSaQUY5cFq56yc6z4tlAf8u4I:19tMCuOvyq56yfEp

Score
10/10
lgoogloaderdownloaderpersistence

Malware Config

Targets

    • Target

      file.exe

    • Size

      882KB

    • MD5

      848a756241f8b1b975173be778cfbf43

    • SHA1

      74b24b949d699880da52c28365e979068aafd032

    • SHA256

      9c9b326ea0ae9aec4786fbb1ecd3522d31ea652a7658137c5a9c5d07df7b0c87

    • SHA512

      b551fff842ddda81e9bf1ae15df83291ef8f0a72a0667f1a1c04e87119dd0a20990f72dab070f1238b01afe95d9b836871cd8c834c117f9e96ddce8fd8e47935

    • SSDEEP

      24576:ML4tDfd3tMCuv2iSaQUY5cFq56yc6z4tlAf8u4I:19tMCuOvyq56yfEp

    Score
    10/10
    persistencelgoogloaderdownloader

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

      downloaderlgoogloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks