General
- Target file.exe
- Size 1.3MB
- Sample230511-txhdysag96
- SHA256 111d6bd8088e8de3b52cb8ee838e0af2c2de59401451e06f068d9bee0c740440
- MD5 1fc4b7d9c8cd525a29e2c9e4f811c9dd
- SHA1 cd96cff1e72ffddbc0eefc7558f4d100182ae541
- SHA512 9a4feed3643a96044df6f1a03f9035173fe2a0513706b677505c2b42c33ecee1b50abfe7d7d73da4bf684ed069f99b7d9a3a79c86bd560ce0dd3b1275f793891
- SSDEEP 12288:zGFL0JOstrdzLurI7HchVgDquQz1h/bLO9uycii/ffOKYSbjlDdB0uN0IOoVyhrv:kbuRAnfd3ZjbyCWTUD9Q3800Taz4pTva
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 1.3MB
- SHA256 111d6bd8088e8de3b52cb8ee838e0af2c2de59401451e06f068d9bee0c740440
- MD5 1fc4b7d9c8cd525a29e2c9e4f811c9dd
- SHA1 cd96cff1e72ffddbc0eefc7558f4d100182ae541
- SHA512 9a4feed3643a96044df6f1a03f9035173fe2a0513706b677505c2b42c33ecee1b50abfe7d7d73da4bf684ed069f99b7d9a3a79c86bd560ce0dd3b1275f793891
- SSDEEP 12288:zGFL0JOstrdzLurI7HchVgDquQz1h/bLO9uycii/ffOKYSbjlDdB0uN0IOoVyhrv:kbuRAnfd3ZjbyCWTUD9Q3800Taz4pTva
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects LgoogLoader payload
-
LgoogLoader
A downloader capable of dropping and executing other malware families.
-
Sets service image path in registry
-
Suspicious use of SetThreadContext