Analysis
-
max time kernel
38s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
09-11-2022 01:04
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKD.37144681.29205.872.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.GenericKD.37144681.29205.872.exe
Resource
win10v2004-20220901-en
General
-
Target
SecuriteInfo.com.Trojan.GenericKD.37144681.29205.872.exe
-
Size
164KB
-
MD5
b531b4e3705c6c0ab46244b566faa49e
-
SHA1
3b9d4eec4306c796df2657657fb45e37df3e8f9d
-
SHA256
261f3949bd50d1d7dc83918e59f453d159215ca018a3f1a8b063f3f0ea0c3ab9
-
SHA512
a1f0b454470bfe2508799cb7e2fe93ff22d83f1ba5073f54efbd3911e58da692e93a70917c0dfac51a81dc7f29fa0b9b867cd7a071d6fc40463fcea6f54121e0
-
SSDEEP
3072:JlaBzj4gF1ST8z8UmLstdwzEFTwcw4BWnoXTYKwO4K:Jlatj4gEUmLsLggMcw4BWneTYc
Malware Config
Extracted
guloader
https://www.jardinimperial.cl/media/Lime-Client_KyuGXeM63.bin
Signatures
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
SecuriteInfo.com.Trojan.GenericKD.37144681.29205.872.exepid process 1956 SecuriteInfo.com.Trojan.GenericKD.37144681.29205.872.exe