Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    2.1MB

  • Sample

    230107-xqxf3shf9z

  • MD5

    9e3fb879139962ef2e5f39b6a08a594d

  • SHA1

    6dcc5ea4cb2ce112c36ff66bcfc1bd25556de6a4

  • SHA256

    42a811dc46e91618c4c1aea2cc52c72a3c6f2ef04d5fe0468e94eda595af4c24

  • SHA512

    243d090fe35282797f72190ddb2e189abe0e07a8dfecd77122f466b9c3b22fcefb96357780182b50aabf64c76593d749e1519cf565367d8bc1282b12979dbdb5

  • SSDEEP

    24576:1+j14HuXgBDb9O+EJnQSa8B2KIHT1BSFekyvOtDSBLA9N:/8JnBkpkSsDdP

Score
10/10
lgoogloaderdownloaderpersistence

Malware Config

Targets

    • Target

      file.exe

    • Size

      2.1MB

    • MD5

      9e3fb879139962ef2e5f39b6a08a594d

    • SHA1

      6dcc5ea4cb2ce112c36ff66bcfc1bd25556de6a4

    • SHA256

      42a811dc46e91618c4c1aea2cc52c72a3c6f2ef04d5fe0468e94eda595af4c24

    • SHA512

      243d090fe35282797f72190ddb2e189abe0e07a8dfecd77122f466b9c3b22fcefb96357780182b50aabf64c76593d749e1519cf565367d8bc1282b12979dbdb5

    • SSDEEP

      24576:1+j14HuXgBDb9O+EJnQSa8B2KIHT1BSFekyvOtDSBLA9N:/8JnBkpkSsDdP

    Score
    10/10
    lgoogloaderdownloaderpersistence

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

      downloaderlgoogloader

    • Sets service image path in registry

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks