Analysis

  • max time kernel
    127s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/08/2023, 08:07

General

  • Target

    849e38b7c2f704de72deb89b4696fc02fb4fa8fe4329e09525b2881dde3d8700.exe

  • Size

    198KB

  • MD5

    46b15eebbabe1587e7a9c7908a1fd0cf

  • SHA1

    c41cba6d15c1d5d912e01b24794c8300e757129b

  • SHA256

    849e38b7c2f704de72deb89b4696fc02fb4fa8fe4329e09525b2881dde3d8700

  • SHA512

    0b738e015d719fcc884754a6471350a8ac1472620db6d354ee16f569bc98c503c619118b711a253a25270025b6992e7885a2e434d301824d04250a993fe2c3f5

  • SSDEEP

    3072:+C+oCiWPQwHfJy1Ja1Jk1J31Ji1JwX1Jw1JB1Jw1JG:QPQwHyJAJiJFJoJ6JOJfJOJG

Score
10/10

Malware Config

Signatures

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\849e38b7c2f704de72deb89b4696fc02fb4fa8fe4329e09525b2881dde3d8700.exe
    "C:\Users\Admin\AppData\Local\Temp\849e38b7c2f704de72deb89b4696fc02fb4fa8fe4329e09525b2881dde3d8700.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1628

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1628-135-0x0000000002C00000-0x0000000002C14000-memory.dmp

          Filesize

          80KB

        • memory/1628-136-0x0000000002C00000-0x0000000002C14000-memory.dmp

          Filesize

          80KB