General

  • Target
    da2f362c315e776de40b0805c5d3571b.bin
  • Size 341KB
  • Sample240501-b8vjjsdc2w
  • SHA256 fa53f8c7ca9bfb109801818f0d680200e100938417952e963cf0f5b880cdcb52
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      45cc8cde27d45cadec7dfec83f44215b807531439a0b2530f965fa5d4acda1b6.exe
    • Size 372KB
    • SHA256 45cc8cde27d45cadec7dfec83f44215b807531439a0b2530f965fa5d4acda1b6
    • MD5 SHA1 SHA512 SSDEEP
    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Adds Run key to start application

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target
      Filmrullerne/Tendance/Unredacted.Sai
    • Size 56KB
    • SHA256 28c901a827e59109f467be705332d753c0fabb390ced9c2a69c48110c69d18a5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    • Modifies Installed Components in the registry

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks