Overview

overview

10

Static

static

3

2702bb251c...2d.exe

windows7-x64

10

2702bb251c...2d.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d.exe

  • Size

    554KB

  • Sample

    241006-s85syswekc

  • MD5

    2c5483106fe248cced82541b91cba20e

  • SHA1

    41e69017b26287ee7814bb35a967672ba58cb714

  • SHA256

    2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d

  • SHA512

    4ca40026e8dc3da75c7e68334d268d5b08f568259e597af1fabbd1586f4aaf05c716e17d0bf4c88b68f765fab6ead6965afd73ecb0ead8b97d3ea1fd55d60130

  • SSDEEP

    12288:4aqrw9z7Or5X16gS7U5XzJocC/Uisrk9qKyzpqK:5Kw9zar5lxYUtz2cC/lqVpqK

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d.exe

    • Size

      554KB

    • MD5

      2c5483106fe248cced82541b91cba20e

    • SHA1

      41e69017b26287ee7814bb35a967672ba58cb714

    • SHA256

      2702bb251c14965787b39f03a9c41000b9b0421528578e5a6a221ad8b27f182d

    • SHA512

      4ca40026e8dc3da75c7e68334d268d5b08f568259e597af1fabbd1586f4aaf05c716e17d0bf4c88b68f765fab6ead6965afd73ecb0ead8b97d3ea1fd55d60130

    • SSDEEP

      12288:4aqrw9z7Or5X16gS7U5XzJocC/Uisrk9qKyzpqK:5Kw9zar5lxYUtz2cC/lqVpqK

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      8b3830b9dbf87f84ddd3b26645fed3a0

    • SHA1

      223bef1f19e644a610a0877d01eadc9e28299509

    • SHA256

      f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37

    • SHA512

      d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03

    • SSDEEP

      192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks