lgoogloader | eb76472cb7a072bbfb59918ef1594ca866fbd9884b2776cb5e427dcec2d3b13e | Triage

Resubmissions

23-02-2024 09:31

240223-lhgvwaeg22 10

21-02-2024 04:14

240221-etyjfabc8x 10

Sharing

General

Target

eb76472cb7a072bbfb59918ef1594ca866fbd9884b2776cb5e427dcec2d3b13e.exe
Size

43KB
Sample

240223-lhgvwaeg22
MD5

ed3326070afd94f87cdaf84b73e6e9ef
SHA1

672a4894dbfccee529479f48b72a5d9387bf4e80
SHA256

eb76472cb7a072bbfb59918ef1594ca866fbd9884b2776cb5e427dcec2d3b13e
SHA512

e50daaa2e312bf1f58aa75009b963570f8bb7839606a05a344cebaa28485789804f3014f7bbbe56f96a89fb148a1dc8a5adb70a1fea5ab7f2bcabd10a6b24948
SSDEEP

768:+zQLbMYi+I2XsS35xRGUZjsosoTwoM1LmelYdX/1QXcmYZllsXEFiRNi:+zQEYiZ2cS35xRGUaosoMoM17lY91QMb

Score

10^/10

lgoogloader downloader evasion trojan

Malware Config

Targets

- Target
  
  eb76472cb7a072bbfb59918ef1594ca866fbd9884b2776cb5e427dcec2d3b13e.exe
- Size
  
  43KB
- MD5
  
  ed3326070afd94f87cdaf84b73e6e9ef
- SHA1
  
  672a4894dbfccee529479f48b72a5d9387bf4e80
- SHA256
  
  eb76472cb7a072bbfb59918ef1594ca866fbd9884b2776cb5e427dcec2d3b13e
- SHA512
  
  e50daaa2e312bf1f58aa75009b963570f8bb7839606a05a344cebaa28485789804f3014f7bbbe56f96a89fb148a1dc8a5adb70a1fea5ab7f2bcabd10a6b24948
- SSDEEP
  
  768:+zQLbMYi+I2XsS35xRGUZjsosoTwoM1LmelYdX/1QXcmYZllsXEFiRNi:+zQEYiZ2cS35xRGUaosoMoM17lY91QMb
Score

10^/10

lgoogloader downloader evasion trojan
- Detects LgoogLoader payload
- LgoogLoader
  A downloader capable of dropping and executing other malware families.
  downloader lgoogloader
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

lgoogloaderdownloaderevasiontrojan