Analysis

  • max time kernel
    117s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    08-11-2024 01:40

General

  • Target

    inst002.exe

  • Size

    265KB

  • MD5

    f38f3aab5af6435226dcca8751f61e6c

  • SHA1

    e555e536dca72784f73422a216aa35206441444a

  • SHA256

    94590b6681e3f9255a27b41a356d0334460ed596daab947258110a4ab94708db

  • SHA512

    0402a9d77388348aa055ab58a3211222ffdbe043e73052e075d861d1d0888437cfdeb2c2d7676b23e539b573bd4a4180d4e5f8af840693823979997f99c76c09

  • SSDEEP

    3072:7DO+LxoC9PZUFfYS3azG0CYUZTCldBG//7VxSVzsC1X6R8geXrVpAFdcmuYT:7a0Sf7oQYUdgiizn9XrXeddTT

Malware Config

Signatures

  • Detects LgoogLoader payload 1 IoCs
  • LgoogLoader

    A downloader capable of dropping and executing other malware families.

  • Lgoogloader family
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\inst002.exe
    "C:\Users\Admin\AppData\Local\Temp\inst002.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1960

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1960-1-0x0000000000170000-0x0000000000182000-memory.dmp

    Filesize

    72KB

  • memory/1960-0-0x00000000000F0000-0x0000000000100000-memory.dmp

    Filesize

    64KB