General

  • Target

    SecuriteInfo.com.Win32.SuspectCrc.2428.21334.exe

  • Size

    668KB

  • Sample

    240712-q5s9msybph

  • MD5

    d0600192505848cd995a4fd00409fd4d

  • SHA1

    47f909d0611d16aed132b9be1bf4048824fb8a7e

  • SHA256

    9190f2a2da37d5b77fbedac7a67049355a778cd0fff6f6d0c11e7a34fac24405

  • SHA512

    795a66942aae809a14a824f634d674811b33d4d375a9d7a1006119cc7677fd4201225856874a78dbd679f4e0295ecd059d3123751db819aa94cd2754c826dc82

  • SSDEEP

    6144:96bAcJM0Y9JnNJP3fyLv5s6MZgrSmArB14lqE7HjqDA/VbVwq77EUT:OPY9XJP3fYv5sBXnrT4lqE7DJbVv7QK

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.SuspectCrc.2428.21334.exe

    • Size

      668KB

    • MD5

      d0600192505848cd995a4fd00409fd4d

    • SHA1

      47f909d0611d16aed132b9be1bf4048824fb8a7e

    • SHA256

      9190f2a2da37d5b77fbedac7a67049355a778cd0fff6f6d0c11e7a34fac24405

    • SHA512

      795a66942aae809a14a824f634d674811b33d4d375a9d7a1006119cc7677fd4201225856874a78dbd679f4e0295ecd059d3123751db819aa94cd2754c826dc82

    • SSDEEP

      6144:96bAcJM0Y9JnNJP3fyLv5s6MZgrSmArB14lqE7HjqDA/VbVwq77EUT:OPY9XJP3fYv5sBXnrT4lqE7DJbVv7QK

    Score
    10/10
    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      9625d5b1754bc4ff29281d415d27a0fd

    • SHA1

      80e85afc5cccd4c0a3775edbb90595a1a59f5ce0

    • SHA256

      c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448

    • SHA512

      dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b

    • SSDEEP

      192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks