General

  • Target
    2026-08-04_5f22e292965935c50da8c9486237cfdd_elex_lockbit_rhadamanthys_stealc_stop
  • Size 167KB
  • Sample260804-hxzgpaeh87
  • SHA256 eec6e4d069d0ef62235c0b20b2bc9faec94691049b41b5961d3bccd943a141f2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-04_5f22e292965935c50da8c9486237cfdd_elex_lockbit_rhadamanthys_stealc_stop
    • Size 167KB
    • SHA256 eec6e4d069d0ef62235c0b20b2bc9faec94691049b41b5961d3bccd943a141f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects LgoogLoader payload

    • Family: LgoogLoader

      A downloader capable of dropping and executing other malware families.

    • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)

    • Detects executables Discord URL observed in first stage droppers

    • Deletes itself

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks