Analysis
-
max time kernel
181s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
29-01-2023 17:42
General
-
Target
d3a1c888cb237bd60ab88e3eafd7d84e52a38ff19fab31b1d031ab4ca5e6ffc3.exe
-
Size
72KB
-
MD5
e44bbe2bb2ba810236fe71b43ddfb9f6
-
SHA1
e7fd5d0c71853a62088b8ed9da5ad2143cd2f2ba
-
SHA256
d3a1c888cb237bd60ab88e3eafd7d84e52a38ff19fab31b1d031ab4ca5e6ffc3
-
SHA512
17362c38e5b1013460f05876e9cb565ecad6a2feeb2a41385a9b312c1a2dc2087e9d361641628b5ad4ca56b2367d481bcebe7539610f1738aa8fbbc266ab6789
-
SSDEEP
768:qqqDkvWFN/nUe7IhsxO+UZd3fC+uu7s6Ib0eWzk/UYx9BHAGgYbbpA3mD:KDXTBnxlUZ580s6201hYx9BHAGgY2mD
Score
10/10
Malware Config
Extracted
Family
guloader
C2
https://drive.google.com/uc?export=download&id=13x0HqxKngLRTu4Qm1jt50xYvdMr428PV
xor.base64
Signatures
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Guloader payload 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3a1c888cb237bd60ab88e3eafd7d84e52a38ff19fab31b1d031ab4ca5e6ffc3.exe"C:\Users\Admin\AppData\Local\Temp\d3a1c888cb237bd60ab88e3eafd7d84e52a38ff19fab31b1d031ab4ca5e6ffc3.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
-
Filesize
2.0MB
-
Filesize
40KB