Overview

overview

10

Static

static

3

a813abee84...c3.exe

windows7-x64

10

a813abee84...c3.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a813abee8420a861bc302be836472317911813d945a45b061a03c48ab6c0dfc3.exe

  • Size

    875KB

  • Sample

    241011-cghaksvdrn

  • MD5

    7f31ecb15c3d93d700a630f4cf7f5b57

  • SHA1

    0523205edcc8f140898a13a42a09fd9046cc1678

  • SHA256

    a813abee8420a861bc302be836472317911813d945a45b061a03c48ab6c0dfc3

  • SHA512

    067b1d89f4fcb84ae7083f8c3864c1bd109f5b7c34a7d3a71afaf57166a270918b5fb5198c836eb309d589140355dc071bc3f2de63a5fe1b01f75a7e4c2ac0b7

  • SSDEEP

    24576:XiGFaq43NvCYqoSWmujTrl192YvmvvqOJ/QOeae:XiGFu3Nvzrddf2YvwvqOJ/qae

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      a813abee8420a861bc302be836472317911813d945a45b061a03c48ab6c0dfc3.exe

    • Size

      875KB

    • MD5

      7f31ecb15c3d93d700a630f4cf7f5b57

    • SHA1

      0523205edcc8f140898a13a42a09fd9046cc1678

    • SHA256

      a813abee8420a861bc302be836472317911813d945a45b061a03c48ab6c0dfc3

    • SHA512

      067b1d89f4fcb84ae7083f8c3864c1bd109f5b7c34a7d3a71afaf57166a270918b5fb5198c836eb309d589140355dc071bc3f2de63a5fe1b01f75a7e4c2ac0b7

    • SSDEEP

      24576:XiGFaq43NvCYqoSWmujTrl192YvmvvqOJ/QOeae:XiGFu3Nvzrddf2YvwvqOJ/qae

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      34442e1e0c2870341df55e1b7b3cccdc

    • SHA1

      99b2fa21aead4b6ccd8ff2f6d3d3453a51d9c70c

    • SHA256

      269d232712c86983336badb40b9e55e80052d8389ed095ebf9214964d43b6bb1

    • SHA512

      4a8c57fb12997438b488b862f3fc9dc0f236e07bb47b2bce6053dcb03ac7ad171842f02ac749f02dda4719c681d186330524cd2953d33cb50854844e74b33d51

    • SSDEEP

      192:jPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4I:u7VpNo8gmOyRsVc4

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks