Overview

overview

10

Static

static

3

0cac92631c...e6.exe

windows7-x64

7

0cac92631c...e6.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cac92631c201434bd9ca13c18d84301ec7c1ecc4111470c32df57e960fcbee6.exe

  • Size

    534KB

  • Sample

    240604-n8k2bsga26

  • MD5

    6c017aa6f64a029fd33fe39c3721dd70

  • SHA1

    85e289141f005e4400a9080caa92977c5bf92a3a

  • SHA256

    0cac92631c201434bd9ca13c18d84301ec7c1ecc4111470c32df57e960fcbee6

  • SHA512

    655be368576a5b7f270b06cd3c909af51f1809560af0860edc52ece584a6cc0d797c248342abdfc5ebc4877c961c52e1e17b8360bd65b14f1e7355d27bc900c2

  • SSDEEP

    12288:karCpCzpXdVLmVKQtJ8PECXxcIvzWrhygoRu6Xy:1roKpXNQwE+xcCiySGy

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      0cac92631c201434bd9ca13c18d84301ec7c1ecc4111470c32df57e960fcbee6.exe

    • Size

      534KB

    • MD5

      6c017aa6f64a029fd33fe39c3721dd70

    • SHA1

      85e289141f005e4400a9080caa92977c5bf92a3a

    • SHA256

      0cac92631c201434bd9ca13c18d84301ec7c1ecc4111470c32df57e960fcbee6

    • SHA512

      655be368576a5b7f270b06cd3c909af51f1809560af0860edc52ece584a6cc0d797c248342abdfc5ebc4877c961c52e1e17b8360bd65b14f1e7355d27bc900c2

    • SSDEEP

      12288:karCpCzpXdVLmVKQtJ8PECXxcIvzWrhygoRu6Xy:1roKpXNQwE+xcCiySGy

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      fbe295e5a1acfbd0a6271898f885fe6a

    • SHA1

      d6d205922e61635472efb13c2bb92c9ac6cb96da

    • SHA256

      a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1

    • SHA512

      2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06

    • SSDEEP

      192:yPtkiQJr7V9r3Ftr87NfwXQ6whlgi62V7i77blbTc4DI:N7Vxr8IgLgi3sVc4

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks