General
- Target file.exe
- Size 516KB
- Sample230418-bhsx2aaf6z
- SHA256 c299db37c9fd56c2642312ed5cd03467cf495ff9dcbd7665e9e551e7f0b0b934
- MD5 1923d5b220eaf954182f1b421c7cd144
- SHA1 23d77c8541eb75f2de236aa0bf50e2327d788d8c
- SHA512 2f2decd64e9d49607700e4399b48a0b1cbadc87c0c64ca52754e65799b96a71f369b9755d40bca3bcffc876358152e65d85068bae0b25fba8c3e929e68958515
- SSDEEP 12288:qBQ+dsrZdM9131/QC/TxjwK/pFzEj7GqD6zBfl2Z1Vecp:qBQisrk/Jdjl/pF4GqD6zBfl2Z1wC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 516KB
- SHA256 c299db37c9fd56c2642312ed5cd03467cf495ff9dcbd7665e9e551e7f0b0b934
- MD5 1923d5b220eaf954182f1b421c7cd144
- SHA1 23d77c8541eb75f2de236aa0bf50e2327d788d8c
- SHA512 2f2decd64e9d49607700e4399b48a0b1cbadc87c0c64ca52754e65799b96a71f369b9755d40bca3bcffc876358152e65d85068bae0b25fba8c3e929e68958515
- SSDEEP 12288:qBQ+dsrZdM9131/QC/TxjwK/pFzEj7GqD6zBfl2Z1Vecp:qBQisrk/Jdjl/pF4GqD6zBfl2Z1wC
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects LgoogLoader payload
-
LgoogLoader
A downloader capable of dropping and executing other malware families.
-
Sets service image path in registry
-
Suspicious use of SetThreadContext