Overview

overview

10

Static

static

3

5516decfc8...0N.exe

windows7-x64

7

5516decfc8...0N.exe

windows10-2004-x64

10

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5516decfc8b4ca782e66470f274e7850N

  • Size

    524KB

  • Sample

    240908-kgjseaybrg

  • MD5

    5516decfc8b4ca782e66470f274e7850

  • SHA1

    f11499f5fa5134f61a885f9805bb844fbd39fef0

  • SHA256

    07e7c66e3c95feef851dbbf45dada43d8746ee2ca26768188e3c06f91b23e67b

  • SHA512

    3fba54ce3e7b5d05999a72593718357c60a8f677d922f010f9a18b191732ac6c102b7db0e9df65cc178a195763c57a08672af5efecfd705929ddc6a68d2d0762

  • SSDEEP

    12288:E5INMIx1otFZEFiZ71EJNnjtGnUrDvJL9MI8UXBuuO7:8IK+obG0+7RGnIB9MSLO7

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      5516decfc8b4ca782e66470f274e7850N

    • Size

      524KB

    • MD5

      5516decfc8b4ca782e66470f274e7850

    • SHA1

      f11499f5fa5134f61a885f9805bb844fbd39fef0

    • SHA256

      07e7c66e3c95feef851dbbf45dada43d8746ee2ca26768188e3c06f91b23e67b

    • SHA512

      3fba54ce3e7b5d05999a72593718357c60a8f677d922f010f9a18b191732ac6c102b7db0e9df65cc178a195763c57a08672af5efecfd705929ddc6a68d2d0762

    • SSDEEP

      12288:E5INMIx1otFZEFiZ71EJNnjtGnUrDvJL9MI8UXBuuO7:8IK+obG0+7RGnIB9MSLO7

    Score
    10/10
    discoveryguloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      adad756e278127e9d31eb33d6e053740

    • SHA1

      71943b9697441152b131a21075f5463ab40ca6ed

    • SHA256

      d1fa47d8485b212eccd266fe5fc2be9750c4b843da78bddd2349ab58ef138b32

    • SHA512

      047fa57a44ed2c2f214be68af1b2740591e4b508a4ca9c2eed7f84b3bb5b6f0a7c1d584e6790cc231dfbb6a23a96f826079ed5b0d9d961e95397ffc345cb7a5c

    • SSDEEP

      48:im11EhqneMPUptuMMNvimk2BAZuMTRCpYEvJdUJvR0Jlof5dwe:F1ppl9NLBAZuYtR0Gd

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      34442e1e0c2870341df55e1b7b3cccdc

    • SHA1

      99b2fa21aead4b6ccd8ff2f6d3d3453a51d9c70c

    • SHA256

      269d232712c86983336badb40b9e55e80052d8389ed095ebf9214964d43b6bb1

    • SHA512

      4a8c57fb12997438b488b862f3fc9dc0f236e07bb47b2bce6053dcb03ac7ad171842f02ac749f02dda4719c681d186330524cd2953d33cb50854844e74b33d51

    • SSDEEP

      192:jPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4I:u7VpNo8gmOyRsVc4

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks