Overview

overview

10

Static

static

4 Pallet M...df.exe

windows7-x64

10

4 Pallet M...df.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4 Pallet MV. CMA CGM Verdi V-250EShipping%0D%0A%09Docs.Commercial Invoice. Packing List. Bill of Landing%0D%0A%09ERCMS00945872.pdf.r29.rar

  • Size

    393KB

  • Sample

    221223-lz275sgc59

  • MD5

    9980e7a10166368be9561b5d9b7d8b74

  • SHA1

    a0d9d48cfc58fcdc2c6117cd031ba6b142e9198e

  • SHA256

    3d0920de890dde1f3902d26c38539ed5fd4d4fbf0da097a6818d1326abc04f56

  • SHA512

    8c04e8c2a66de42ea257b677c5bf399b14e5878eb8124450a29f26dcc5cd7eae6f148bf9226e5c46db4e7cf8ef8c8bb4d84a23c4f65f35fce779ce04a7056be2

  • SSDEEP

    6144:vkNXUXxb13nW3N0djwIb+32DKHM74J5S7D/QCPkcKrVYu9Tx5C2KOh8TRAlrh1Z6:sKbxW90mDGu44G9Hu9FQUh4RErB5I

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      4 Pallet MV. CMA CGM Verdi V-250EShipping Docs.Commercial Invoice. Packing List. Bill of Landing ERCMS00945872.pdf.exe

    • Size

      513KB

    • MD5

      a52478e75fbb20e4d0c2de385db1b3ce

    • SHA1

      ed9a76bd4c286c2b7ffa7b0bf5b66db2a1eb1088

    • SHA256

      88784edc4183537c005102816de40a74499b1261a416eb02fcf1dbcc634b349b

    • SHA512

      d2e0abab3c5bc436f2131d231761ba2539a9280781b3fa7eeac3f6a4a8c9d38c7d5d0ccdea952c5c2fe91e0803467eef1a583defedf7e7efd4d561d5d2d31d1c

    • SSDEEP

      12288:L3LuHzF7bje6/+3lRe+Q3JRtB1Ir/YJGPm030VDbHQ:WTF7PK3lRe+W5D8/YguHQ

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks