Overview

overview

10

Static

static

3

JUSTIFICAN...86.exe

windows7-x64

10

JUSTIFICAN...86.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

chechako.com

windows7-x64

chechako.com

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ed0b4e62470c2f641d69c54fb81ecad0038dc80e71da252385a010a2d7049c7.rar

  • Size

    609KB

  • Sample

    241016-btke2azdpn

  • MD5

    f927c18ece932c07df9a3fd132bf2abb

  • SHA1

    8bd889824cbf53aa69d7619b192c1282f706c82e

  • SHA256

    2ed0b4e62470c2f641d69c54fb81ecad0038dc80e71da252385a010a2d7049c7

  • SHA512

    595e1f94df015286e17f3d3a0575270cb0c5c41b42c960dface4f6488ce63efa581f36cadabdcfd4bec08f7648679e1b0d976e7474ab27b736ce7f9c8e108f40

  • SSDEEP

    12288:im2t6vFHlUOB7rCR6YDgLbiOxOLrRikSwH7u+XnLCku5MCckRk5imN:im2cVJm6FbiOgLNN7u2L+2CZCN

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      JUSTIFICANTE PAGO FRAS AGOSTO 2024 4302286.exe

    • Size

      687KB

    • MD5

      05cc45c89c721e509ea2b88068ec90d7

    • SHA1

      fbf54840c30725dda327d94b4da11380cbc1b11c

    • SHA256

      1375c9e14bd451ad69a74fa2c5480891537f3b63590b46ed9181cf88e9fa45a0

    • SHA512

      5abcb6502abc02a9732cea1eb9b957e64ba57d6a2b588d1c2092d8b3f419c66d719c7e09d7be28c828e4c3d7700aa7a5fc73a5e7b5bb28d2e18e93e0f0489178

    • SSDEEP

      12288:cQszxdK1xIHkD5/wHPZCrV0tHBTBT/SryWE8Nhh31nrDW8QjdlDjspRaFhCyiNu4:OwcPZx9Bl6eWfN/pD18d9uts4

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      4d3b19a81bd51f8ce44b93643a4e3a99

    • SHA1

      35f8b00e85577b014080df98bd2c378351d9b3e9

    • SHA256

      fda0018ab182ac6025d2fc9a2efcce3745d1da21ce5141859f8286cf319a52ce

    • SHA512

      b2ba9c961c0e1617f802990587a9000979ab5cc493ae2f8ca852eb43eeaf24916b0b29057dbff7d41a1797dfb2dce3db41990e8639b8f205771dbec3fd80f622

    • SSDEEP

      192:BPtkumJX7zB22kGwfy0mtVgkCPOse1un:u702k5qpdseQn

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      chechako.com

    • Size

      455KB

    • MD5

      716783bb1d3664c916795e809845bcf9

    • SHA1

      22a0076526207aff8c83250a30dfe3f44cba90a3

    • SHA256

      7628e5edd0245fb03671199dc1f8e7fe18b4cdfcedd9a9569213d8a14a776f88

    • SHA512

      3977ea2c5642f821e46cafe5d71f0457a30b375a1c5599c44f44c220e4751ea2b6bacee16a21bb30297e88ba1cdc9345ca2186b503d2b6be8ee14ecf1b8952fd

    • SSDEEP

      1536:ddmZ/2sgaTmJd0qcED+kbCZznzj/y5kv44558hoY6fEo:ddoTiwHy5kvH6hqfEo

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks