Overview

overview

10

Static

static

3

SÖZLEŞME...df.exe

windows7-x64

10

SÖZLEŞME...df.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XUTF-8XQXSC396ZLEC59EME_C59EARTLARI_28YENC4B0_SC4B0PARXXXXXUTF-8XQXC4B0C59E_SC396ZLEC59EMESC4B029-pdf2E7zX

  • Size

    626KB

  • Sample

    241003-q2khbsydjk

  • MD5

    14568015337f3b80ec55d39571932f1c

  • SHA1

    a62b62c63139d1949037ff20a7ffd07c340b3262

  • SHA256

    f32c3fb0bf2016c1f8ad700fdf278a7362210900c365ec8155c2c667c97fb579

  • SHA512

    426425a714a158fe86fccc5ded9db94756cc4e05f6ab754268d57c317a63851181f58ed1fd094b33d760693711b1c92209cbd8f899300f98b7a32bbbe893d69d

  • SSDEEP

    12288:N+XLUsFgPoMyXPv2BMmuXRLNHcTGTtPV1ocvu0/oZ+fZBbumcKWuPqFqylj1b:N+7U0gPKJrcTy7oQj6+unui5

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      SÖZLEŞME ŞARTLARI (YENİ SİPARİŞ SÖZLEŞMESİ)-pdf.bat

    • Size

      894KB

    • MD5

      c8c2fa1b682b0bca8ed9de83455e8977

    • SHA1

      ff96ea1f052d0e7745a4fe30bacb8362ea57ba2c

    • SHA256

      4af23250a740fc8e855879c8f0492b8be3613ef015db4347d14885f57e25ee93

    • SHA512

      d692404d369b4755e760599a50078f0240dd3a5af2af5953ad86d00eaa788c812bed59b22f19c1251bdd192a8d81a10c4d10ec9cc6a15b1e7a44bfb51c20c258

    • SSDEEP

      24576:ZFZsHTO9u9XKhrmod1RYTy7OQJs+45oi4:Z3n9i61RYeiQJBGf4

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      d968cb2b98b83c03a9f02dd9b8df97dc

    • SHA1

      d784c9b7a92dce58a5038beb62a48ff509e166a0

    • SHA256

      a4ec98011ef99e595912718c1a1bf1aa67bfc2192575729d42f559d01f67b95c

    • SHA512

      2ee41dc68f329a1519a8073ece7d746c9f3bf45d8ef3b915deb376af37e26074134af5f83c8af0fe0ab227f0d1acca9f37e5ca7ae37c46c3bcc0331fe5e2b97e

    • SSDEEP

      192:CVA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:CrR7SrtTv53tdtTgwF4SQbGPX36wJMw

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks