Overview

overview

7

Static

static

1

LagoFast_w..._1.exe

windows7-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    LagoFast_windows_1.exe

  • Size

    79.6MB

  • Sample

    240825-vwmgysvfkg

  • MD5

    56faed0b7aa95f3da2b4b42cc565bd96

  • SHA1

    6f9f6cc6568c488d12785f2181dd41baf8328276

  • SHA256

    99fab2f387d199832ecdbd0438c529c5969e3271da6a64d213ea20616322f261

  • SHA512

    079b5584ed51f3c3fb5fddcb6098931ba1eb5cc986c2f32e7f6f3ff5d6cb8aa84901931e8e313dad76eb401883f5cc83bf8048f0af00d1c17ad6a0e6b0397bb8

  • SSDEEP

    1572864:WD2LXMgl6jcz/6VOUBjz97XbnfHJZO4J5elpXjcjD:VlrYZXTl5eDTmD

Score
7/10
bootkitdiscoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      LagoFast_windows_1.exe

    • Size

      79.6MB

    • MD5

      56faed0b7aa95f3da2b4b42cc565bd96

    • SHA1

      6f9f6cc6568c488d12785f2181dd41baf8328276

    • SHA256

      99fab2f387d199832ecdbd0438c529c5969e3271da6a64d213ea20616322f261

    • SHA512

      079b5584ed51f3c3fb5fddcb6098931ba1eb5cc986c2f32e7f6f3ff5d6cb8aa84901931e8e313dad76eb401883f5cc83bf8048f0af00d1c17ad6a0e6b0397bb8

    • SSDEEP

      1572864:WD2LXMgl6jcz/6VOUBjz97XbnfHJZO4J5elpXjcjD:VlrYZXTl5eDTmD

    Score
    7/10
    bootkitdiscoverypersistenceprivilege_escalationupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks