General

  • Target

    9146cee3d387cb3d665885b95d885734541f281cbb2a4726b6a59df922a83ee7

  • Size

    1.9MB

  • Sample

    230109-clb95afg4w

  • MD5

    b859b990ea2adae467e0080aacdfabe5

  • SHA1

    7e206519519d72bf49efbc272d70a4785e282808

  • SHA256

    9146cee3d387cb3d665885b95d885734541f281cbb2a4726b6a59df922a83ee7

  • SHA512

    f61c6e20793461f1a2dac2bd77561518a42010537011026ff406fe03fba0c0148244eb6f5f6ffe55d1f07cd5c21f1f8a898c9302720d9513cb5f606d6022a262

  • SSDEEP

    24576:MOYvJhKAX4PP/6E4OZO/1fURAGVaugrgvuy5KR4LzkKGAWO1ObUKdkES/ip:MJuAoPngIO/efaJ0LKAkYg8ES/ip

Score
10/10

Malware Config

Targets

    • Target

      9146cee3d387cb3d665885b95d885734541f281cbb2a4726b6a59df922a83ee7

    • Size

      1.9MB

    • MD5

      b859b990ea2adae467e0080aacdfabe5

    • SHA1

      7e206519519d72bf49efbc272d70a4785e282808

    • SHA256

      9146cee3d387cb3d665885b95d885734541f281cbb2a4726b6a59df922a83ee7

    • SHA512

      f61c6e20793461f1a2dac2bd77561518a42010537011026ff406fe03fba0c0148244eb6f5f6ffe55d1f07cd5c21f1f8a898c9302720d9513cb5f606d6022a262

    • SSDEEP

      24576:MOYvJhKAX4PP/6E4OZO/1fURAGVaugrgvuy5KR4LzkKGAWO1ObUKdkES/ip:MJuAoPngIO/efaJ0LKAkYg8ES/ip

    Score
    10/10
    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks