General
- Target 545c9b0499ec2a2e5503d72d76954ed020e63a290895cb3fcd4f382a2496b31a
- Size 571KB
- Sample240417-p4dxwsfh94
- SHA256 545c9b0499ec2a2e5503d72d76954ed020e63a290895cb3fcd4f382a2496b31a
Score
10/10
Malware Config
Targets
-
- Target 3137663df90055b5c2dd92ff91ed1a0edc6965dbd50f83578643c727b36b060b.exe
- Size 652KB
- SHA256 3137663df90055b5c2dd92ff91ed1a0edc6965dbd50f83578643c727b36b060b
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
- Target Borteskamoteringers/Fridtjof.Bea
- Size 58KB
- SHA256 4fc178d7b0c912917422d5259e796c28f38a765bc3f56fa14df7480b49a0f2f2
Score8/10-
Modifies Installed Components in the registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.