Overview

overview

10

Static

static

1

0b0b7c6bc2...7e.exe

windows7-x64

7

0b0b7c6bc2...7e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b0b7c6bc22bbd0a62026668891d251bb170f77689a008859d2c72c8e2a8d17e

  • Size

    709KB

  • Sample

    230210-jtj39sbe37

  • MD5

    38d8e18d94189aeb2f9f2d79206e546b

  • SHA1

    baa5016d64df659d63f1caf8c10205c85c3d78e1

  • SHA256

    0b0b7c6bc22bbd0a62026668891d251bb170f77689a008859d2c72c8e2a8d17e

  • SHA512

    acf9aaf08b7c3e006c2d64f9198c5b19e3e8368ef2464091902fa60ae172d9d20a96759573c2549c16af72fb8f8a81f2926f68ec2f09bbb8da20eedfde7bb5bd

  • SSDEEP

    12288:PToPWBv/cpGrU3ySQznYwDLQ4pRlWPpzGyZWbWj0UhJsszXYYUE3:PTbBv5rUWznYwDs4rGpzGQ0odYY/3

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      0b0b7c6bc22bbd0a62026668891d251bb170f77689a008859d2c72c8e2a8d17e

    • Size

      709KB

    • MD5

      38d8e18d94189aeb2f9f2d79206e546b

    • SHA1

      baa5016d64df659d63f1caf8c10205c85c3d78e1

    • SHA256

      0b0b7c6bc22bbd0a62026668891d251bb170f77689a008859d2c72c8e2a8d17e

    • SHA512

      acf9aaf08b7c3e006c2d64f9198c5b19e3e8368ef2464091902fa60ae172d9d20a96759573c2549c16af72fb8f8a81f2926f68ec2f09bbb8da20eedfde7bb5bd

    • SSDEEP

      12288:PToPWBv/cpGrU3ySQznYwDLQ4pRlWPpzGyZWbWj0UhJsszXYYUE3:PTbBv5rUWznYwDs4rGpzGQ0odYY/3

    Score
    10/10
    discoveryguloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks