Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
29-01-2023 17:42
General
-
Target
8dc22051b3b116993095315408c14d174c2940288459d9f08b7748ce766d159d.exe
-
Size
72KB
-
MD5
9637ed14979db65038feef4198e52dd1
-
SHA1
2b4e7ff68836b91dce0cd8cf34ead1136bd6fe84
-
SHA256
8dc22051b3b116993095315408c14d174c2940288459d9f08b7748ce766d159d
-
SHA512
e1958a332a865e1fc5ea9388fe839182477f936a26bf5a82b4d231a8fd3397892aa64f7b10a6757b5ae0058e0c66266f095f94566d2e60d56ef5bca4224d24db
-
SSDEEP
1536:KDsqCVErgbEQ9RwK5aAcFYkKGuF+lQNYql/D:KYqCUgbEwR7RcFYkKGuF2QNx/
Score
10/10
Malware Config
Extracted
Family
guloader
C2
https://drive.google.com/uc?export=download&id=1ZHj4dLvE53vort3O5aUec7FCICQviii2
xor.base64
Signatures
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Guloader payload 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8dc22051b3b116993095315408c14d174c2940288459d9f08b7748ce766d159d.exe"C:\Users\Admin\AppData\Local\Temp\8dc22051b3b116993095315408c14d174c2940288459d9f08b7748ce766d159d.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
1.7MB