Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    04/08/2023, 18:11

General

  • Target

    Karine Petakchyan_cn23_9472851349.exe

  • Size

    965KB

  • MD5

    e043c8898a75aad615ff0fef09107687

  • SHA1

    a68f791d83fadcb3f260266217ec7fc4890e0759

  • SHA256

    0833d3623ff0b7912e1cf1379ffb1f838077f6e0dc9fc93f1260117bc24c02bd

  • SHA512

    022f2c284403cce301c2bbe6271dda8b24b464a35cb3932a2170b564c0bf35f3af00f999200902abe73d186bd0e459139310334b1bcd2ee2309816b0d645b61c

  • SSDEEP

    24576:Ks/55wUAf/66ZONqEmDhsVdPCC7OQ4oYvzWcG:Ksj4/zYNqvDiCC7F43G

Score
10/10

Malware Config

Signatures

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\Karine Petakchyan_cn23_9472851349.exe
    "C:\Users\Admin\AppData\Local\Temp\Karine Petakchyan_cn23_9472851349.exe"
    1⤵
    • Loads dropped DLL
    PID:2028

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\nsd7C91.tmp\System.dll

          Filesize

          12KB

          MD5

          8cf2ac271d7679b1d68eefc1ae0c5618

          SHA1

          7cc1caaa747ee16dc894a600a4256f64fa65a9b8

          SHA256

          6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba

          SHA512

          ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3

        • memory/2028-62-0x0000000003010000-0x0000000004331000-memory.dmp

          Filesize

          19.1MB

        • memory/2028-63-0x0000000003010000-0x0000000004331000-memory.dmp

          Filesize

          19.1MB