Overview

overview

10

Static

static

2485f735c0...1a.exe

windows7-x64

10

2485f735c0...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2485f735c03e20c735eca2c0a09414df90250d4752a18201da5bf6681bf7011a

  • Size

    370KB

  • Sample

    230116-2k2aasef72

  • MD5

    a32b788edd581c4e82458591793ff4cf

  • SHA1

    f0ec8a70302ef858f7c9dcfdc26fc32404ff287c

  • SHA256

    2485f735c03e20c735eca2c0a09414df90250d4752a18201da5bf6681bf7011a

  • SHA512

    ed951adebedcfc34fdfba478410b2865e0ab489cb8d1ee62ba8f3635faef3d2dafe686ec4a21a0d68c65d6a8833c7a9efa0136672e19a2d77d38371c4a5e0e8e

  • SSDEEP

    6144:Jp+ggHax9YoyAQmlIMGrSdyrjbRnjWoR2HqpAo++:fFY5ALiMqjbJWoZSo++

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      2485f735c03e20c735eca2c0a09414df90250d4752a18201da5bf6681bf7011a

    • Size

      370KB

    • MD5

      a32b788edd581c4e82458591793ff4cf

    • SHA1

      f0ec8a70302ef858f7c9dcfdc26fc32404ff287c

    • SHA256

      2485f735c03e20c735eca2c0a09414df90250d4752a18201da5bf6681bf7011a

    • SHA512

      ed951adebedcfc34fdfba478410b2865e0ab489cb8d1ee62ba8f3635faef3d2dafe686ec4a21a0d68c65d6a8833c7a9efa0136672e19a2d77d38371c4a5e0e8e

    • SSDEEP

      6144:Jp+ggHax9YoyAQmlIMGrSdyrjbRnjWoR2HqpAo++:fFY5ALiMqjbJWoZSo++

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Checks QEMU agent file

      Checks presence of QEMU agent, possibly to detect virtualization.

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks