Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    07/08/2023, 09:22

General

  • Target

    9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034.exe

  • Size

    213KB

  • MD5

    fad7d978f37b6eca741eb994321f0df0

  • SHA1

    37233a7124138f647a26be453ddebb92115e8f51

  • SHA256

    9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034

  • SHA512

    cfbc644409cc3349478ac150e84d605ed9bd5125770962fd422c08e715ac118eacb2ffedf7db7b1d41598cf1fd0e21f249e672ad9e9b2cc8d44297124bf9ddf9

  • SSDEEP

    6144:l1a0uuhMeSuq9JRJyJ1J7J7JSJNJlJ4JnJlJ2JlJM:rNhMeSM

Score
10/10

Malware Config

Signatures

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034.exe
    "C:\Users\Admin\AppData\Local\Temp\9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3036-56-0x0000000000250000-0x0000000000261000-memory.dmp

          Filesize

          68KB

        • memory/3036-57-0x0000000000250000-0x0000000000261000-memory.dmp

          Filesize

          68KB