Overview

overview

10

Static

static

10

Gusnabo.exe

windows7-x64

7

Gusnabo.exe

windows10-2004-x64

7

Gusnabo.pyc

windows7-x64

3

Gusnabo.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Gusnabo.exe

  • Size

    14.3MB

  • Sample

    240201-zkme2agbel

  • MD5

    96285ad4a6fea01eb07e38845b6df174

  • SHA1

    ff8e7241f7685bb1418630fd22205408f21e59ee

  • SHA256

    01e38e52035112609c5b5630a116aa4d7395b4a0859533afdff18d525228185c

  • SHA512

    c35c324efd9ababd4e3ef6d1e1b3ff7376927b1f39c71d057517f9e2950c4cff7887ec47e2de5efd52df1455b7f72f92216107071f1ace295db68c7364b25e04

  • SSDEEP

    196608:z1Ekv0sKYu/PaQ+DuXJpjyEDfyGgMwBdnpkYRMz8NJ7cwRtlLXhrTL5U/hpet:REkZQNDfDgMc6ArBLRfLuw

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      Gusnabo.exe

    • Size

      14.3MB

    • MD5

      96285ad4a6fea01eb07e38845b6df174

    • SHA1

      ff8e7241f7685bb1418630fd22205408f21e59ee

    • SHA256

      01e38e52035112609c5b5630a116aa4d7395b4a0859533afdff18d525228185c

    • SHA512

      c35c324efd9ababd4e3ef6d1e1b3ff7376927b1f39c71d057517f9e2950c4cff7887ec47e2de5efd52df1455b7f72f92216107071f1ace295db68c7364b25e04

    • SSDEEP

      196608:z1Ekv0sKYu/PaQ+DuXJpjyEDfyGgMwBdnpkYRMz8NJ7cwRtlLXhrTL5U/hpet:REkZQNDfDgMc6ArBLRfLuw

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      Gusnabo.pyc

    • Size

      32KB

    • MD5

      30868f3b74e81f564aff3a4d18314b48

    • SHA1

      84f08f784808d881434af14cc98f7bb5a46b6ef2

    • SHA256

      3e86aeed09b78f79e8b0782134dfd62e56c854b042eedcbef7ac105402934e90

    • SHA512

      d659b2c070a1408b7d6d90cfeb7ba04b3b99807235fad43de8012034f7bc8c78d04e4d40a78fa70ad16a8c0dfbd9c3fc8d0e3ceb0d9df22738b1b8bac8d6b5f8

    • SSDEEP

      768:L83nrm2VsfNEiyAuAfKFMrRtfqtvEwS7bnjerAroaHDsIAvN8YC06X:I3r0e3aKFcfDwS7fOPviYD6X

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks