General
-
Target
Gunluk.exe
-
Size
39.6MB
-
Sample
240327-y9n5gsbd92
-
MD5
74385d396a3aaca4c9bac519888db216
-
SHA1
1f5a39fa71faaf2910972f11becb536572d51f70
-
SHA256
427b3e1b0a170cfcea6b28d464a1c2f2d0238bd22e7ae2d1c118a4cdf9837d58
-
SHA512
bf7f9fa43f34a9e80024d2affff4be8c1c91089bd831283d98dfaf0a1305ddfd2753dae4a8f0cfb4b1e91d2a7eabca1b2fc0a54d1416d6d9e2b5b908e4285293
-
SSDEEP
786432:i0ar7SICcEO9A70p8aJ5xZi8XRQfeeoV2wxlhfganBkt:Ba3e570BJ5xQieoHxlhfHnC
Static task
static1
Behavioral task
behavioral1
Sample
Gunluk.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
Gunluk.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
Gunluk.exe
-
Size
39.6MB
-
MD5
74385d396a3aaca4c9bac519888db216
-
SHA1
1f5a39fa71faaf2910972f11becb536572d51f70
-
SHA256
427b3e1b0a170cfcea6b28d464a1c2f2d0238bd22e7ae2d1c118a4cdf9837d58
-
SHA512
bf7f9fa43f34a9e80024d2affff4be8c1c91089bd831283d98dfaf0a1305ddfd2753dae4a8f0cfb4b1e91d2a7eabca1b2fc0a54d1416d6d9e2b5b908e4285293
-
SSDEEP
786432:i0ar7SICcEO9A70p8aJ5xZi8XRQfeeoV2wxlhfganBkt:Ba3e570BJ5xQieoHxlhfHnC
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-