Overview

overview

10

Static

static

3

d322df678d...a6.exe

windows7-x64

10

d322df678d...a6.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d322df678d8d8b40b30c463a51395a961b0a703a01523d6def82a4679b5729a6.exe

  • Size

    898KB

  • Sample

    241009-px3mnsygpg

  • MD5

    2a19eac38990809a62213e2b89be0f60

  • SHA1

    99d231bc3c54c0d29469c97c4987329fd523fe20

  • SHA256

    d322df678d8d8b40b30c463a51395a961b0a703a01523d6def82a4679b5729a6

  • SHA512

    c5691f86d12f6263405d44288f0ca918dccb8ecd131010053cb12b4989587257935fd0f219ae06f36f79a30fba123596569cdcd0c65a342db2d68583f6a56d11

  • SSDEEP

    24576:ZFZsHTO9u9XKhrmooaiw6J/xJ3hLGdftX8P2J8:Z3n9i6BiwW5J3lStMPm8

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      d322df678d8d8b40b30c463a51395a961b0a703a01523d6def82a4679b5729a6.exe

    • Size

      898KB

    • MD5

      2a19eac38990809a62213e2b89be0f60

    • SHA1

      99d231bc3c54c0d29469c97c4987329fd523fe20

    • SHA256

      d322df678d8d8b40b30c463a51395a961b0a703a01523d6def82a4679b5729a6

    • SHA512

      c5691f86d12f6263405d44288f0ca918dccb8ecd131010053cb12b4989587257935fd0f219ae06f36f79a30fba123596569cdcd0c65a342db2d68583f6a56d11

    • SSDEEP

      24576:ZFZsHTO9u9XKhrmooaiw6J/xJ3hLGdftX8P2J8:Z3n9i6BiwW5J3lStMPm8

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      d968cb2b98b83c03a9f02dd9b8df97dc

    • SHA1

      d784c9b7a92dce58a5038beb62a48ff509e166a0

    • SHA256

      a4ec98011ef99e595912718c1a1bf1aa67bfc2192575729d42f559d01f67b95c

    • SHA512

      2ee41dc68f329a1519a8073ece7d746c9f3bf45d8ef3b915deb376af37e26074134af5f83c8af0fe0ab227f0d1acca9f37e5ca7ae37c46c3bcc0331fe5e2b97e

    • SSDEEP

      192:CVA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:CrR7SrtTv53tdtTgwF4SQbGPX36wJMw

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks