General
- Target a0e9d68e9a8541eb30d6a31cae4a942b.bin
- Size 1.0MB
- Sample240424-b63gdadh75
- SHA256 6cba8fb868e71fb1943f4a5859dedfe57f373196c034306193f2c062323a2162
Score
10/10
Malware Config
Targets
-
- Target b9d1e862b5f864aab90e418632cf973132a4b4cbe4044b1fb997d9dfbd7ad0f4.exe
- Size 1.1MB
- SHA256 b9d1e862b5f864aab90e418632cf973132a4b4cbe4044b1fb997d9dfbd7ad0f4
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Adds Run key to start application
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
- Target Michelines.All
- Size 56KB
- SHA256 a03bb54517df231824d324ad20b79094efef9af20eff855e30a6f459bcc43912
Score8/10-
Modifies Installed Components in the registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.