Analysis

  • max time kernel
    123s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/08/2023, 09:22

General

  • Target

    9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034.exe

  • Size

    213KB

  • MD5

    fad7d978f37b6eca741eb994321f0df0

  • SHA1

    37233a7124138f647a26be453ddebb92115e8f51

  • SHA256

    9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034

  • SHA512

    cfbc644409cc3349478ac150e84d605ed9bd5125770962fd422c08e715ac118eacb2ffedf7db7b1d41598cf1fd0e21f249e672ad9e9b2cc8d44297124bf9ddf9

  • SSDEEP

    6144:l1a0uuhMeSuq9JRJyJ1J7J7JSJNJlJ4JnJlJ2JlJM:rNhMeSM

Score
10/10

Malware Config

Signatures

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034.exe
    "C:\Users\Admin\AppData\Local\Temp\9f538c5e89121892ee4b8a72bbbde175bd33aff319451634a8dd233d645e7034.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4812

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4812-135-0x0000000002200000-0x0000000002211000-memory.dmp

          Filesize

          68KB

        • memory/4812-136-0x0000000002200000-0x0000000002211000-memory.dmp

          Filesize

          68KB