Resubmissions

10/04/2024, 02:58

240410-dgn9kacd4610

10/04/2024, 02:58

240410-dgnm2aff7x10

10/04/2024, 02:58

240410-dgnb9sff7w10

10/04/2024, 02:58

240410-dgm2haff7v10

23/08/2023, 14:58

230823-sb7laaed4110

General

  • Target
    loader.exe
  • Size 401KB
  • Sample230823-sb7laaed41
  • SHA256 8d647fd3ebb00c9d853eb728ff7cba75b7a089d30f84090e3bc1dc460bdd47f3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • gurcu

C2
  • https://api.telegram.org/bot6193093056:AAHzyNGUGS9aUG6CCx6ENLoXpCFLzEQywIQ/sendMessage?chat_id=1098292643

Signatures

File Explorer

  • loader.exe
    .exe 401KB

loader.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 8d647fd3ebb00c9d853eb728ff7cba75b7a089d30f84090e3bc1dc460bdd47f3
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
00:e3:37:e6:86:fd:33:88:4b:cf:73:24:4a:8d:72:31:6a:6e:de:8f:7b:97:ac:b5:b3:85:de:d7:3d:7e:66:34
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains

Aug 23, 2023

Minor OS version
Major OS version
Entry point
406094
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths