HOMETHREATSLgoogLoader
MALWARE FAMILY

LgoogLoader

Internal ID: win.lgoogloader
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

LgoogLoader is an installer that drops three files: a batch file, an AutoIt interpreter, and an AutoIt script. After downloading, it executes the batch file.

Threat Analysis

LgoogLoader is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://blog.polyswarm.io/nullmixer-drops-multiple-malware-families
→https://inside.harfanglab.io/blog/articles/cyber-threat-intelligence/loader-galore-taskloader-at-the-start-of-a-pay-per-install-infection-chain/

Quick Facts

TypeMalware Family
Aliases1

Also Known As

win.lgoogloader

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search LgoogLoader