Analysis

  • max time kernel
    122s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 23:38

General

  • Target

    2046b941817392e3815535fccb1f39dc.exe

  • Size

    112KB

  • MD5

    2046b941817392e3815535fccb1f39dc

  • SHA1

    843d243a71131baf9fbe0fcf4ba129f51ee74c8f

  • SHA256

    c0d3da1cefd1a979c8b8ce102fd5d3ff090779f72f4d1098eb383cbbb3480bee

  • SHA512

    ecf0b711c41619dcf9073f1cd4c769cc106b04aaec40881fc11cbf8686989da512a9c2ee2683a90b99dddb1f4a762cf4df512663519bc9035bbc6d0fd90f9571

  • SSDEEP

    1536:BUS3/zw2m3c39SYeXvmgU2sIMflWub4cL51tY4SQmiPYElZ943ckw2mUS3/:BT/zM3c3bcBsIMfQuDaSZS3ckYT/

Score
10/10

Malware Config

Signatures

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2046b941817392e3815535fccb1f39dc.exe
    "C:\Users\Admin\AppData\Local\Temp\2046b941817392e3815535fccb1f39dc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2972-2-0x00000000002E0000-0x00000000002EF000-memory.dmp

          Filesize

          60KB

        • memory/2972-3-0x00000000002E0000-0x00000000002EF000-memory.dmp

          Filesize

          60KB