General

  • Target

    e405f3facfec4741b7a25d5490bf7fe55ba525f4d17706a6e3d8b00b2a725025

  • Size

    1.2MB

  • Sample

    230424-gvtyrabg4s

  • MD5

    8c9e184323c1067391db30439d42309f

  • SHA1

    6fbe4c6ec78ba5976f0c3a760bf560bcadec5544

  • SHA256

    e405f3facfec4741b7a25d5490bf7fe55ba525f4d17706a6e3d8b00b2a725025

  • SHA512

    1cd3822a20924c27207220879c3650bed1e4dab9717224d76ad96ec0aa9664e6b6966a5c2593724ab7d296eeb1bb61864259b034a4791c91f2e8b26ba8860b9a

  • SSDEEP

    12288:EVEHF11PvAeHV/K4dQwDoJvvQ6/XQUtF/8eNcXD1EzAqsoykRNmx09Lp0KGjr2+C:ESDGntl+ICZWxkD9SR7

Malware Config

Targets

    • Target

      e405f3facfec4741b7a25d5490bf7fe55ba525f4d17706a6e3d8b00b2a725025

    • Size

      1.2MB

    • MD5

      8c9e184323c1067391db30439d42309f

    • SHA1

      6fbe4c6ec78ba5976f0c3a760bf560bcadec5544

    • SHA256

      e405f3facfec4741b7a25d5490bf7fe55ba525f4d17706a6e3d8b00b2a725025

    • SHA512

      1cd3822a20924c27207220879c3650bed1e4dab9717224d76ad96ec0aa9664e6b6966a5c2593724ab7d296eeb1bb61864259b034a4791c91f2e8b26ba8860b9a

    • SSDEEP

      12288:EVEHF11PvAeHV/K4dQwDoJvvQ6/XQUtF/8eNcXD1EzAqsoykRNmx09Lp0KGjr2+C:ESDGntl+ICZWxkD9SR7

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

    • Sets service image path in registry

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks