Analysis

  • max time kernel
    119s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-07-2023 13:10

General

  • Target

    62885-AKexe.exe

  • Size

    211KB

  • MD5

    c8db347ef42527fd13a9fd09eb744a5a

  • SHA1

    ff2313624e4ecac41291103ac061500138e57808

  • SHA256

    10d388586975935c6c7d713696bdb56629d81f098c4d1207b1c0523cc0ff187c

  • SHA512

    2ab36d22d4def4175edda5e2f7f46d537708e9c9f411b74f112974151d14e3d4bf99ade437fb50d74933ea2e92b6c00f9953d71f91fe95ff55f231102c7126b0

  • SSDEEP

    6144:Hehgvo1n+wqVUTvhIcj9EOhCygo4KfpA:H8gvo1+BVUzhPEOhCNHYW

Score
10/10

Malware Config

Signatures

  • Detects LgoogLoader payload 2 IoCs
  • LgoogLoader

    A downloader capable of dropping and executing other malware families.

Processes

  • C:\Users\Admin\AppData\Local\Temp\62885-AKexe.exe
    "C:\Users\Admin\AppData\Local\Temp\62885-AKexe.exe"
    1⤵
      PID:1520

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1520-133-0x0000000000900000-0x0000000000909000-memory.dmp

      Filesize

      36KB

    • memory/1520-134-0x0000000000930000-0x000000000093D000-memory.dmp

      Filesize

      52KB

    • memory/1520-135-0x0000000000930000-0x000000000093D000-memory.dmp

      Filesize

      52KB