General
- Target eff3cb4ab664eabe2dc44b5d648f25ff.exe
- Size 915KB
- Sample221103-a6b4radbf6
- SHA256 5c19fb2da50d67ae379047a6a30c01a418aefc98956d0d1662404742e9d84878
- MD5 eff3cb4ab664eabe2dc44b5d648f25ff
- SHA1 4a1d9f5ccf9d39e565f09978e32133ee3b3cdac4
- SHA512 8508843ebcbf6cce819a97b7272f516c3d4f0dc671a1ab11e030fedac57d85183a310ea30dbd97bf3456c8e14296e9cbefc558afc958b77691caf94049e91ba0
- SSDEEP 24576:qayJZ+vSawFgbDFLV9DUPKEdvXI31E1R8h3oaK/Ubp:vVaXKDFoPfdKE1RWYaK/+p
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
eff3cb4ab664eabe2dc44b5d648f25ff.exe
Resource
win7-20220812-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
eff3cb4ab664eabe2dc44b5d648f25ff.exe
Resource
win10v2004-20220812-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target eff3cb4ab664eabe2dc44b5d648f25ff.exe
- Size 915KB
- SHA256 5c19fb2da50d67ae379047a6a30c01a418aefc98956d0d1662404742e9d84878
- MD5 eff3cb4ab664eabe2dc44b5d648f25ff
- SHA1 4a1d9f5ccf9d39e565f09978e32133ee3b3cdac4
- SHA512 8508843ebcbf6cce819a97b7272f516c3d4f0dc671a1ab11e030fedac57d85183a310ea30dbd97bf3456c8e14296e9cbefc558afc958b77691caf94049e91ba0
- SSDEEP 24576:qayJZ+vSawFgbDFLV9DUPKEdvXI31E1R8h3oaK/Ubp:vVaXKDFoPfdKE1RWYaK/+p
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects LgoogLoader payload
-
LgoogLoader
A downloader capable of dropping and executing other malware families.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext