lgoogloader | 7ce366cf2cc3e1787d552e5603568e1ce96496aacef73df9676b9a3fafe660db | Triage

Sharing

General

Target

7ce366cf2cc3e1787d552e5603568e1ce96496aacef73df9676b9a3fafe660db
Size

534KB
Sample

230116-m8tssshh7y
MD5

4715769b2a3a90dc8c939aec11c52bc1
SHA1

1a1eeabc9d4758de67016ed1e06defd571107e63
SHA256

7ce366cf2cc3e1787d552e5603568e1ce96496aacef73df9676b9a3fafe660db
SHA512

308badf1be750b58399a3532b452a85cf345d222a1ec48949c99fd5cbe6505a79e8093b72ea117ef8b3963b8ddcbf2812907a5d8535b98c9480bb038fcdfe579
SSDEEP

12288:j3RH/6XLdYJkrsi+u3bYIvz6D6bX1lbBLfzn6lU1F4Xla:DY5YgEmFpBr9yM

Score

10^/10

lgoogloader downloader persistence

Malware Config

Targets

- Target
  
  7ce366cf2cc3e1787d552e5603568e1ce96496aacef73df9676b9a3fafe660db
- Size
  
  534KB
- MD5
  
  4715769b2a3a90dc8c939aec11c52bc1
- SHA1
  
  1a1eeabc9d4758de67016ed1e06defd571107e63
- SHA256
  
  7ce366cf2cc3e1787d552e5603568e1ce96496aacef73df9676b9a3fafe660db
- SHA512
  
  308badf1be750b58399a3532b452a85cf345d222a1ec48949c99fd5cbe6505a79e8093b72ea117ef8b3963b8ddcbf2812907a5d8535b98c9480bb038fcdfe579
- SSDEEP
  
  12288:j3RH/6XLdYJkrsi+u3bYIvz6D6bX1lbBLfzn6lU1F4Xla:DY5YgEmFpBr9yM
Score

10^/10

lgoogloader downloader persistence
- Detects LgoogLoader payload
- LgoogLoader
  A downloader capable of dropping and executing other malware families.
  downloader lgoogloader
- Sets service image path in registry
  persistence
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lgoogloaderdownloaderpersistence