General
-
Target
06112024_0151_05112024_Fayda İmza Planı İmza və Qaytarma #0004621.tbz
-
Size
706KB
-
Sample
241106-b9x13avpgj
-
MD5
6918a3148d3b8cfc0fc8f7d9ddd1f043
-
SHA1
94ac31bdf37fa23d126c05be371ab1736e030ea6
-
SHA256
89610e2f92bf94480bf6d749c1cbe1b771ee3c24a15ee06bfa6ae6cb8dc255d8
-
SHA512
187e3e9114ce20c5f36dd42c027bb130419684a2c295da9d63033d95a160af990f34afaad6e7366fb076a394526468e911f11fcb90e7dc88e9a9039f9c15fff2
-
SSDEEP
12288:rGHfObe9R2RNsskjK1RCdUf0Xo4ktJG6M3UL3AX1dQAk6+WisKWXGiQVbpv:rFe9R27fDCdhDkXk23AXLQz6NKWFQVbR
Malware Config
Targets
-
-
Target
Fayda Imza Plani Imza v? Qaytarma #0004621.com
-
Size
730KB
-
MD5
cd06d82ad09e145590b1887814d74e55
-
SHA1
40fa350868cd13d8bbe91333de0e36222bd91fae
-
SHA256
819c6c2cc22d8a40774dc16d55760be3297fb00c62e9ed246aa66a676241447a
-
SHA512
645ff09759ca0a98506eea702dda090c6a6c02c00d8074c4552e0a9bb6e0e85c77c53e2ed769da5d13fd658628a372fa7889251f3caf78e7b8487c45706bc32b
-
SSDEEP
12288:bBLbRgX4fCaSnlTnhqEuEpOhiFncewhrT9toKN+E4ArCoEzm+WLk2dtfgqKujNHl:ttNCjlIa8qcewB9OKNbMmtFdtBKujpgg
Score10/10-
Guloader family
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
ee260c45e97b62a5e42f17460d406068
-
SHA1
df35f6300a03c4d3d3bd69752574426296b78695
-
SHA256
e94a1f7bcd7e0d532b660d0af468eb3321536c3efdca265e61f9ec174b1aef27
-
SHA512
a98f350d17c9057f33e5847462a87d59cbf2aaeda7f6299b0d49bb455e484ce4660c12d2eb8c4a0d21df523e729222bbd6c820bf25b081bc7478152515b414b3
-
SSDEEP
192:eF24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol9Sl:h8QIl975eXqlWBrz7YLOl9
Score3/10 -