Overview

overview

10

Static

static

3

609467bc7d...94.exe

windows7-x64

10

609467bc7d...94.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    609467bc7d0dcd6e9bfb2274d84849c7df9b00937dbf089a5f42c814ab79a494.exe

  • Size

    898KB

  • Sample

    241005-brw12s1gjc

  • MD5

    2fef98b5085c1e1fdc201a97ac49c946

  • SHA1

    dffe58633474c3e08f6a4bd2954b0ac9073e4bce

  • SHA256

    609467bc7d0dcd6e9bfb2274d84849c7df9b00937dbf089a5f42c814ab79a494

  • SHA512

    02bb114858cabac56f57d979c619e41eb35b9c8de3a288da9eb0c976632df6e6c63e49fd8659ef873316004066546e5813c3e8be01b842897b24d37223925e3a

  • SSDEEP

    24576:ZFZsHTO9u9XKhrmorJ9DrUmK/6axMLZ4/8D1Y7+2:Z3n9i6xJ9PaxM14/8w+2

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      609467bc7d0dcd6e9bfb2274d84849c7df9b00937dbf089a5f42c814ab79a494.exe

    • Size

      898KB

    • MD5

      2fef98b5085c1e1fdc201a97ac49c946

    • SHA1

      dffe58633474c3e08f6a4bd2954b0ac9073e4bce

    • SHA256

      609467bc7d0dcd6e9bfb2274d84849c7df9b00937dbf089a5f42c814ab79a494

    • SHA512

      02bb114858cabac56f57d979c619e41eb35b9c8de3a288da9eb0c976632df6e6c63e49fd8659ef873316004066546e5813c3e8be01b842897b24d37223925e3a

    • SSDEEP

      24576:ZFZsHTO9u9XKhrmorJ9DrUmK/6axMLZ4/8D1Y7+2:Z3n9i6xJ9PaxM14/8w+2

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      d968cb2b98b83c03a9f02dd9b8df97dc

    • SHA1

      d784c9b7a92dce58a5038beb62a48ff509e166a0

    • SHA256

      a4ec98011ef99e595912718c1a1bf1aa67bfc2192575729d42f559d01f67b95c

    • SHA512

      2ee41dc68f329a1519a8073ece7d746c9f3bf45d8ef3b915deb376af37e26074134af5f83c8af0fe0ab227f0d1acca9f37e5ca7ae37c46c3bcc0331fe5e2b97e

    • SSDEEP

      192:CVA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:CrR7SrtTv53tdtTgwF4SQbGPX36wJMw

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks