General

  • Target

    7ba6ab30eb71e8ab3ccdc734633391c092b25160f62173d4b6237da6c55b5a24

  • Size

    45KB

  • Sample

    230608-nkwsxsfe21

  • MD5

    788f396393dcab0c3dee93fbd2ae8371

  • SHA1

    3ba5c566299ba91072f41cffa8894a237bcff71d

  • SHA256

    7ba6ab30eb71e8ab3ccdc734633391c092b25160f62173d4b6237da6c55b5a24

  • SHA512

    a11266ac7f051fc8ef89ae8a003dd7d27456891e835754d40b706d08c0446d1a176eb2ff3673dfb3a351b8e59856db4902b90d44195c9c3d88a99d3fdaeb35d4

  • SSDEEP

    768:RjFq7GFIOtbLrPg2Eln1eL2HLMGTay0CE5qb4rafyFZ:xF3b/PZEV1eL2rhTarefyFZ

Malware Config

Targets

    • Target

      7ba6ab30eb71e8ab3ccdc734633391c092b25160f62173d4b6237da6c55b5a24

    • Size

      45KB

    • MD5

      788f396393dcab0c3dee93fbd2ae8371

    • SHA1

      3ba5c566299ba91072f41cffa8894a237bcff71d

    • SHA256

      7ba6ab30eb71e8ab3ccdc734633391c092b25160f62173d4b6237da6c55b5a24

    • SHA512

      a11266ac7f051fc8ef89ae8a003dd7d27456891e835754d40b706d08c0446d1a176eb2ff3673dfb3a351b8e59856db4902b90d44195c9c3d88a99d3fdaeb35d4

    • SSDEEP

      768:RjFq7GFIOtbLrPg2Eln1eL2HLMGTay0CE5qb4rafyFZ:xF3b/PZEV1eL2rhTarefyFZ

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

    • Sets service image path in registry

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks