guloader | 39e37a6736984b617a47818ffdbd202199c75f769821d4939f1d61dff621098d

General

Target
Commande No 00007 de M.N.S. S.A. 24000127 MNS Distribution.exe
Size 548KB
Sample240426-genf2aae37
SHA256 39e37a6736984b617a47818ffdbd202199c75f769821d4939f1d61dff621098d
MD5 edeb34f392872f3c9e220bc9dcf9ba86
SHA1 e9fb6ff7cd47ec7b08391f4c1ecc1e684bf28ff7
SHA512 f33bc39692838cc94ae0ed6aedddfcecb8fd564de6de0d81a258ece57eba04cb7820f1fe834e48b4e0cbce95409449514bb645e69584ad62e0439fea306af424
SSDEEP 12288:47YvE3TaaFpfEwmgfwwQxeoKGaGsIMcgLvlU2eZysZMNue:bENj7JgaRe0VN9
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Commande No 00007 de M.N.S. S.A. 24000127 MNS Distribution.exe
- Size 548KB
- SHA256 39e37a6736984b617a47818ffdbd202199c75f769821d4939f1d61dff621098d
- MD5 edeb34f392872f3c9e220bc9dcf9ba86
- SHA1 e9fb6ff7cd47ec7b08391f4c1ecc1e684bf28ff7
- SHA512 f33bc39692838cc94ae0ed6aedddfcecb8fd564de6de0d81a258ece57eba04cb7820f1fe834e48b4e0cbce95409449514bb645e69584ad62e0439fea306af424
- SSDEEP 12288:47YvE3TaaFpfEwmgfwwQxeoKGaGsIMcgLvlU2eZysZMNue:bENj7JgaRe0VN9
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

guloader downloader persistence
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Adds Run key to start application
  persistence
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  unvolubly/Langtrkkendes/Pelletising.Art
- Size 56KB
- SHA256 de1fc8dc64b49c5ae8c2c9c45e7dd4d2aa154f845e99a8e8fa08b5abf23d38a7
- MD5 19779840eecfc141420a08cb9a741962
- SHA1 0f0a168bc292914da146f667557ff5f07b0f5ae5
- SHA512 d3be08e433f93bafc5d53ea6e91c53e01d755bf1c61e4006aa184da35644b343bd72d0ddbee9820db107c2df212dc4a51a4e06ebf3cf6c1e45ed250f2b383723
- SSDEEP 1536:M2JnexhWTLwrzAPNCVjXRFnhoMMesE5FxGFlAqfq+7:MGghWPwrMeh9b2ELxGFl77
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4