Overview

overview

10

Static

static

1

Contractin...59.exe

windows7-x64

10

Contractin...59.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    F4FC88FD532FD7EEEC75F62A9A12302F24B6F5ECC7ED2BD4C8B9ACF6EB5382C3

  • Size

    299KB

  • Sample

    230208-v3dtdsch4x

  • MD5

    2ad40fa6cfda5e8889b8aea953a4c922

  • SHA1

    5b7f8c501b968c8522c605821a8dbe87381ed235

  • SHA256

    f4fc88fd532fd7eeec75f62a9a12302f24b6f5ecc7ed2bd4c8b9acf6eb5382c3

  • SHA512

    57ea424486409048c91593e73c05ed74add3a9a6e1a0ab342946a491107ae0c3f95a79c287bb3ade67ff7e0c014dc6e4d6a4e02ac140edbffd226b494861a414

  • SSDEEP

    6144:ZrPgrjwh6PJO/QpIbBWyybc+PzBJUsQRtGLNe+Td61BTL:ZDEjwwpgXQnBSsQ0RTd61BTL

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      Contracting Order - CO22-SH1159.exe

    • Size

      613KB

    • MD5

      598006943c00897342521805a95ca553

    • SHA1

      ff0d0e310dcff0011161515c504df7d49dbeba7b

    • SHA256

      df148634d4c1283169e14cdf73cd66c217c4259eb24cdc4aa94e834d5373ccf9

    • SHA512

      efa3006bde7ce0f05cf9bf11ee5beb700b2a9539d532b883906606db18c6a72e1fe9c7e414f41c76f54a17aa0a78350fd4ee93ff6fc0387bb24769a235a9a499

    • SSDEEP

      6144:VGYgXWlQw/LOvqf+fNu8HQc4o97VsAHWUt0TNBpt8OGM8eow6oW8TWBa2T4Wrdc9:ADGz0I+M8J52U0NuMrs748dX2

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks