Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
21-01-2022 23:29
Static task
static1
Behavioral task
behavioral1
Sample
PO_45081.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PO_45081.exe
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
-
Target
PO_45081.exe
-
Size
36KB
-
MD5
0d2e92d7e2de616b99bf5d4f49dfae3a
-
SHA1
7c9c05baf1fe55e769792e29601653c72367dcfb
-
SHA256
fc96921dd556142c49dc7fbc6f98ae9244864e8f5c874d921980c2a7a50b092e
-
SHA512
60a8b489aadc87507b7c9ca46c836705f9b8a7ea9d3f98d12e72ff652f8ca54a8271d31505bf472e1fc950eba5d9c4bf37afdf2e8b3af63011bea0935a40335c
Score
10/10
Malware Config
Extracted
Family
guloader
C2
https://drive.google.com/uc?export=download&id=1aD-DQwbacDDWYEAwL9PuwH-xsWirbPKs
xor.base64
Signatures
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
PO_45081.exepid process 1744 PO_45081.exe