General
- Target file.exe
- Size 404KB
- Sample221229-pf3aksda36
- SHA256 2e128ec938bbb7fc4c2c9444ad21ffe9e2dee5fdc74ec9bf91d9663df77c49d4
- MD5 9c6060a57dcb1d94a69b638424279a8b
- SHA1 65f1728196f6f06822303e5bda411e81f187300c
- SHA512 471488f5b7399bf9d8b9d47379cd507426733f1d8d7f6d663575ab59fd0f7e16810a4dff9b4f9258cdd525c36aa989144b6cdc749bc34cf2a7c8c38ce907db1a
- SSDEEP 12288:NtNr2UjL5S7XJZqx+6FunjCTR6Hyk2JnkBJ:nN6IG6xbFu2F6SkSn0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 404KB
- SHA256 2e128ec938bbb7fc4c2c9444ad21ffe9e2dee5fdc74ec9bf91d9663df77c49d4
- MD5 9c6060a57dcb1d94a69b638424279a8b
- SHA1 65f1728196f6f06822303e5bda411e81f187300c
- SHA512 471488f5b7399bf9d8b9d47379cd507426733f1d8d7f6d663575ab59fd0f7e16810a4dff9b4f9258cdd525c36aa989144b6cdc749bc34cf2a7c8c38ce907db1a
- SSDEEP 12288:NtNr2UjL5S7XJZqx+6FunjCTR6Hyk2JnkBJ:nN6IG6xbFu2F6SkSn0
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detects LgoogLoader payload
LgoogLoader
A downloader capable of dropping and executing other malware families.
Uses the VBS compiler for execution
Suspicious use of SetThreadContext