Overview

overview

10

Static

static

1013878588...80.exe

windows7-x64

3

1013878588...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8463849a48326c8b46c38717c30a7acc.bin

  • Size

    145KB

  • Sample

    230130-xlxahsdc3x

  • MD5

    13e4b49e54cb15f92b4a8ad77e731037

  • SHA1

    3c66060e1633963eaba1a425add68c0de380e4c3

  • SHA256

    857f1fa5de679da0a0717dec356f61c66a6ed75beb8c848fb4cad1a32514ac13

  • SHA512

    d1448d67d74f04fd1dd61baba80e8fb3af0b92851d1e107fe174dd8116d63ba610e97777c1412e73fd418e671eeea90e03940d07dca857ca9eb6a0b271a5b1f3

  • SSDEEP

    3072:rDWd4gpjL9jJL05rj0B5zbalF8MJLXMtRIkttHgglW:rD+4EvtJI10bKJgtRICHgOW

Score
10/10
lgoogloaderdownloaderpersistence

Malware Config

Targets

    • Target

      101387858898c5dc0102bfd2b57fe50707dd002c093a4dc596bf3e7e854f6880.exe

    • Size

      220KB

    • MD5

      8463849a48326c8b46c38717c30a7acc

    • SHA1

      5c81ea3b2a013b8736872f2d667ba4bc42f4544e

    • SHA256

      101387858898c5dc0102bfd2b57fe50707dd002c093a4dc596bf3e7e854f6880

    • SHA512

      32ecc9c2bc1ae18dae8ac3a832e375faad7d1b426f826872b17d54b766fd2411048960a19c85a2ec8371f3497396514f517216d903074bdb81487dc441247d20

    • SSDEEP

      3072:vLQ3jFFRmQukKxwumnIU2bQ3/Ksg+O/J/Ksg+O/XWf+/Ksg+O/Ti:XQukK6hn3/Ksgz/KsgE+/Ksgk

    Score
    10/10
    lgoogloaderdownloaderpersistence

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

      downloaderlgoogloader

    • Sets service image path in registry

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks