General

  • Target

    SecuriteInfo.com.NSIS.Malware-gen.2435.exe

  • Size

    416KB

  • Sample

    220922-p872jafcen

  • MD5

    dc88a2e75a03524ab6592154fd2c82fd

  • SHA1

    77dd56ea80034760769f2fcaf2529ba8abceb115

  • SHA256

    03c0b10be2c560acd4c9772a9fb19c271ee143592ec316c580a3b4a6e433a219

  • SHA512

    512a5a4f9c734f31741c760b387d14f4fa85f9fd3260f5cebe143b47d14fb6b2e6193e1bbf02e952fa96c547c9e97fc87f9fa7cb2b1badf2292f3ee9e7a1b743

  • SSDEEP

    6144:imOP8vxPGEVS87lLaYC3HPGYDKO7/XuFlx17i/963CECfOYcQmF:XvxlVS87lCvGWA7uQ3CECXM

Malware Config

Targets

    • Target

      SecuriteInfo.com.NSIS.Malware-gen.2435.exe

    • Size

      416KB

    • MD5

      dc88a2e75a03524ab6592154fd2c82fd

    • SHA1

      77dd56ea80034760769f2fcaf2529ba8abceb115

    • SHA256

      03c0b10be2c560acd4c9772a9fb19c271ee143592ec316c580a3b4a6e433a219

    • SHA512

      512a5a4f9c734f31741c760b387d14f4fa85f9fd3260f5cebe143b47d14fb6b2e6193e1bbf02e952fa96c547c9e97fc87f9fa7cb2b1badf2292f3ee9e7a1b743

    • SSDEEP

      6144:imOP8vxPGEVS87lLaYC3HPGYDKO7/XuFlx17i/963CECfOYcQmF:XvxlVS87lCvGWA7uQ3CECXM

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks