Analysis

  • max time kernel
    299s
  • max time network
    304s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    23-07-2021 12:53

General

  • Target

    BITTE BEILIEGENDE LISTE PRÜFEN.exe

  • Size

    276KB

  • MD5

    f5e551fc46cb77add2779a6f2eac21f6

  • SHA1

    028a48111d1384f63b7c3ea49bd61657878e395f

  • SHA256

    05eb2372d69ff0998c939de9470aa1cc1e9fec62daf0c50e49cabfe0daaded0c

  • SHA512

    c84f86da879a0134d3a8146cab8f544ab7c5d9f1d72ad7e849bef24073894d5387a84f8a400df21ce17eff57f37986b83550cc54ad64c360fb3fb1c4c4a64861

Score
10/10

Malware Config

Signatures

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BITTE BEILIEGENDE LISTE PRÜFEN.exe
    "C:\Users\Admin\AppData\Local\Temp\BITTE BEILIEGENDE LISTE PRÜFEN.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/804-116-0x0000000002B70000-0x0000000002B83000-memory.dmp
    Filesize

    76KB