Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
15-09-2024 14:54
General
-
Target
Bon de commande 2021_02_15_pdf.exe
-
Size
128KB
-
MD5
a77715c06e5afd34b0d513eb8b570511
-
SHA1
a4932df3f917349f92503cd2f21eac41a79a8e39
-
SHA256
cecab4db1eb666098828a5161c7a2c894b24f42fe7261b8231e766e1ce9a0794
-
SHA512
edf8d3c76690df75935fb9584e09ed1e3cf0f81923ee6bc35cc0e1c0dc02816b956572ce2dfc4a2dcd0b436c62a88ed9390a38f61ccc583e85b4265fb7a20ab9
-
SSDEEP
1536:tA2LBRs3v551vUMcJnJpBC62AJkUxtUK0LC+WbP6A+5Vx8Fw:DRelfcVJyW7Y5VSFw
Score
10/10
Malware Config
Extracted
Family
guloader
C2
https://drive.google.com/uc?export=download&id=1-LXF5SIKTMmMYkkk8NMa_ApqEWVr3Qx4
xor.base64
Signatures
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bon de commande 2021_02_15_pdf.exe"C:\Users\Admin\AppData\Local\Temp\Bon de commande 2021_02_15_pdf.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
-
Filesize
40KB