General
- Target e778bb2a5cf80db389e541958d9c3bf2
- Size 1.2MB
- Sample240125-xwpcnaecgn
- SHA256 489485f76c425b348691243b18355c39990c477483b8f2eca99d9df8225ba3f9
Score
10/10
Malware Config
Targets
-
- Target e778bb2a5cf80db389e541958d9c3bf2
- Size 1.2MB
- SHA256 489485f76c425b348691243b18355c39990c477483b8f2eca99d9df8225ba3f9
Score10/10Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
Loads dropped DLL
Adds Run key to start application
Suspicious use of NtCreateThreadExHideFromDebugger
Suspicious use of NtSetInformationThreadHideFromDebugger
Suspicious use of SetThreadContext
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 7fb0f8d452fefaac789986b933df050f3d3e4feb8a8d9944ada995f572dcdca1
Score3/10 -
- Target brandesianerens.deb
- Size 123KB
- SHA256 ed1a8fd830e609d77d9cd8548aee9a4b48c241957bf115af74bad4704521bd13
Score3/10