MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 e083a7c668754d455af09758334519bdff408dec3215a223b2b4f8d5e2344452. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
LgoogLoader
Vendor detections: 14
| SHA256 hash: | e083a7c668754d455af09758334519bdff408dec3215a223b2b4f8d5e2344452 |
|---|---|
| SHA3-384 hash: | 98b69ab7998b630aac7fef0c1d4e29c5a6f0734401e8fe9ab9831a6b317571b5d0de4413eb748771096899c5c28a67c0 |
| SHA1 hash: | 08f58f51120d9a4ff9d28c479589c39ceac7dfe8 |
| MD5 hash: | 7e6a47fccc9516742ad7d6c6ef93ad1b |
| humanhash: | blossom-quiet-leopard-venus |
| File name: | 7e6a47fccc9516742ad7d6c6ef93ad1b.exe |
| Download: | download sample |
| Signature | LgoogLoader |
| File size: | 232'960 bytes |
| First seen: | 2023-06-26 06:08:59 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | c2fb1c9c80219ccd23a8e9e47f82a58a (1 x LgoogLoader) |
| ssdeep | 3072:Ns5HQet/vgLewZUFYdmJ4s6puer4V/HYl0N0CueDkbqfs4VawbmA7gucI97Q5jjV:C4UYkys+rm/HYcueYmThbHXrZuCNEn |
| Threatray | 152 similar samples on MalwareBazaar |
| TLSH | T14D349D21B3E59175F1F32B306AB89A654A3EFD369D75C98F2294014E09B1E80DA35B33 |
| TrID | 74.9% (.CPL) Windows Control Panel Item (generic) (197083/11/60) 11.8% (.EXE) Win32 Executable MS Visual C++ (generic) (31206/45/13) 4.0% (.EXE) Win64 Executable (generic) (10523/12/4) 2.5% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2) 1.9% (.EXE) Win16 NE executable (generic) (5038/12/1) |
| Reporter |  abuse_ch |
| Tags: | exe LgoogLoader |
Intelligence
File Origin
# of uploads :
1
# of downloads :
264
Origin country :
NLVendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
7e6a47fccc9516742ad7d6c6ef93ad1b.exe
Verdict:
Malicious activity
Analysis date:
2023-06-26 06:10:03 UTC
Tags:
opendir loader gcleaner
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Result
Verdict:
Malware
Maliciousness:
Behaviour
Searching for the window
Verdict:
Malicious
Threat level:
10/10
Confidence:
100%
Tags:
greyware lolbin packed shell32.dll
Verdict:
Malicious
Labled as:
Trojan.JP.Generic
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
NetWalker Ransomware
Verdict:
Malicious
Result
Threat name:
lgoogLoader
Detection:
malicious
Classification:
troj.evad
Score:
80 / 100
Signature
Antivirus detection for URL or domain
Detected unpacking (creates a PE file in dynamic memory)
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
PE file has nameless sections
Yara detected lgoogLoader
Behaviour
Behavior Graph:
Threat name:
Win32.Downloader.SmallAgent
Status:
Malicious
First seen:
2023-06-26 01:03:30 UTC
File Type:
PE (Exe)
Extracted files:
1
AV detection:
26 of 37 (70.27%)
Threat level:
3/5
Detection(s):
Suspicious file
Verdict:
malicious
Similar samples:
+ 142 additional samples on MalwareBazaar
Result
Malware family:
lgoogloader
Score:
10/10
Tags:
family:lgoogloader downloader
Behaviour
Detects LgoogLoader payload
LgoogLoader
Unpacked files
SH256 hash:
365e354d9a3458eb6257f584c1eaa0c8487b1c92b1862b1ae1193aa1cc9d500f
MD5 hash:
b85a68b78bcc0ea003b6416e4c83b635
SHA1 hash:
e550dd80ee3b080b3ba998482b8dd422f7ab18c2
SH256 hash:
ceb192ff08bda7b4cb12d2f55806be2e5038e0701a8304dc210e9348a4d50b34
MD5 hash:
2b1c72b8354a9ce3204548c7cb0fc24e
SHA1 hash:
7790b7ade96afde27a5c1887394891932b5780e6
SH256 hash:
365e354d9a3458eb6257f584c1eaa0c8487b1c92b1862b1ae1193aa1cc9d500f
MD5 hash:
b85a68b78bcc0ea003b6416e4c83b635
SHA1 hash:
e550dd80ee3b080b3ba998482b8dd422f7ab18c2
SH256 hash:
ceb192ff08bda7b4cb12d2f55806be2e5038e0701a8304dc210e9348a4d50b34
MD5 hash:
2b1c72b8354a9ce3204548c7cb0fc24e
SHA1 hash:
7790b7ade96afde27a5c1887394891932b5780e6
SH256 hash:
e083a7c668754d455af09758334519bdff408dec3215a223b2b4f8d5e2344452
MD5 hash:
7e6a47fccc9516742ad7d6c6ef93ad1b
SHA1 hash:
08f58f51120d9a4ff9d28c479589c39ceac7dfe8
Malware family:
SmokeLoader
Verdict:
Malicious
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.