Resubmissions

30-08-2023 08:39

230830-kkpstsdg7v 10

28-09-2022 16:23

220928-tv38msged4 8

General

  • Target

    61fc044a34211_Thu167fb182622.bin

  • Size

    879KB

  • Sample

    230830-kkpstsdg7v

  • MD5

    cc722fd0bd387cf472350dc2dd7ddd1e

  • SHA1

    49d288ddbb09265a586dd8d6629c130be7063afa

  • SHA256

    588a87d450987dfb3a72361c012b36285a5b3087cc8c282b6f2de46ae95291f2

  • SHA512

    893375a8816bc333a9521b50d26b4018d1a3181b502dac73cef3357755651d833744a42bfd7f2daeb6e15d420600b91cdb910a0a1fb1a28d5012697a1f92733b

  • SSDEEP

    24576:S88Sk1iPd8yvsuKbzMBpyZELPSqEZU9g+Aua:xlWiFxEuKbooZyPSqEZU9g7

Malware Config

Targets

    • Target

      61fc044a34211_Thu167fb182622.bin

    • Size

      879KB

    • MD5

      cc722fd0bd387cf472350dc2dd7ddd1e

    • SHA1

      49d288ddbb09265a586dd8d6629c130be7063afa

    • SHA256

      588a87d450987dfb3a72361c012b36285a5b3087cc8c282b6f2de46ae95291f2

    • SHA512

      893375a8816bc333a9521b50d26b4018d1a3181b502dac73cef3357755651d833744a42bfd7f2daeb6e15d420600b91cdb910a0a1fb1a28d5012697a1f92733b

    • SSDEEP

      24576:S88Sk1iPd8yvsuKbzMBpyZELPSqEZU9g+Aua:xlWiFxEuKbooZyPSqEZU9g7

    • Detects LgoogLoader payload

    • LgoogLoader

      A downloader capable of dropping and executing other malware families.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks