Overview

overview

10

Static

static

3

c95764c294...d0.exe

windows7-x64

10

c95764c294...d0.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c95764c294dd8139cfcd34b796a77f6d218942ca5d485152c489dda2c9c9c0d0

  • Size

    732KB

  • Sample

    240829-dlwt7ssepl

  • MD5

    302556d322a1b90777ba093ae93b2aa9

  • SHA1

    1a05d5018191f273e9a8c09e894c599ede8a6c58

  • SHA256

    c95764c294dd8139cfcd34b796a77f6d218942ca5d485152c489dda2c9c9c0d0

  • SHA512

    6cbced8fbce7ff964f4b4b662796913c9f9c638367d04456689697420091f07f022a346c49d8dcf26f97738589374e85293543f7d9118a845abb7e317e6ea58d

  • SSDEEP

    12288:cZCgwRmWooxcQTjJGMlE4pjBXDf0w40mRRtN9QkLImDIkLsQVlx:cLfhHAdHXpjBzf0+WRtppLsWlx

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      c95764c294dd8139cfcd34b796a77f6d218942ca5d485152c489dda2c9c9c0d0

    • Size

      732KB

    • MD5

      302556d322a1b90777ba093ae93b2aa9

    • SHA1

      1a05d5018191f273e9a8c09e894c599ede8a6c58

    • SHA256

      c95764c294dd8139cfcd34b796a77f6d218942ca5d485152c489dda2c9c9c0d0

    • SHA512

      6cbced8fbce7ff964f4b4b662796913c9f9c638367d04456689697420091f07f022a346c49d8dcf26f97738589374e85293543f7d9118a845abb7e317e6ea58d

    • SSDEEP

      12288:cZCgwRmWooxcQTjJGMlE4pjBXDf0w40mRRtN9QkLImDIkLsQVlx:cLfhHAdHXpjBzf0+WRtppLsWlx

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      8508fa0ab17e36e071687243283c2aef

    • SHA1

      d45391d0454fbb9eb66fa72ecf0e2cadf0522bfe

    • SHA256

      90f3cebb5b3759eb1bd72cee7cd8b694440ee398fe970b763db7a7b67208e4c8

    • SHA512

      241cf26e57006402897d8adaff37f3006c1bdbb09d6c5d10c32d556996df5785dc81c35ccbbc74384f80853a3e4aea7be251a4fa2613be42108e11a00692df5a

    • SSDEEP

      192:S9rQDenC9VrcK7REgSWOprANupQYLRszDDH/d9CWlXo7U6Wxf:SJQEaVAK7R9SfpjpQYLRszfH/d9CWB1j

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks