Overview

overview

10

Static

static

3

e9617a78c9...8c.exe

windows7-x64

10

e9617a78c9...8c.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    629be165860d2336755de85467756639.bin

  • Size

    734KB

  • Sample

    241108-bp638ssbmg

  • MD5

    9b2197538465bb8c2e7b82d5d6da9d1a

  • SHA1

    5fd60c9bf9aa4a2b769a8c1242f846239d223b64

  • SHA256

    71afac4f513f72e9e14993cc3a4cb4964fe4486e1b2f139cab7b89924f7aed44

  • SHA512

    35569bb6de3eb2f5c84a4e5dc4f1267b52feb002fa478709249d78ffb770c9ea357c3170477417e4b6d7abb970ba301d5718610fb672ab39b7bdf4d621d356f8

  • SSDEEP

    12288:rAAZdHwOokbHybNfB2gPxeLpelwgri+cRWby4GKHOrLlM+E1wZ6vxXOa+3:rAAZtw4HufB22qsjcRWbmA1+bZ6vxeaK

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      e9617a78c93e6d5cdc1087dfa6e9bf9d63406e05b6b01135c189242a7c33718c.exe

    • Size

      851KB

    • MD5

      629be165860d2336755de85467756639

    • SHA1

      af1da57d01a00bf942e127cce60fb4208bfd9795

    • SHA256

      e9617a78c93e6d5cdc1087dfa6e9bf9d63406e05b6b01135c189242a7c33718c

    • SHA512

      418f56a804212158033b1ae592cafeb8fa1c5a0d9506eb541beb7762c23ebfe5c61dbac8588c350816c229e9f6d77457e361423146874695976c1b8d9267cbff

    • SSDEEP

      24576:ZNAsPMh+Cdd8509puHmATonQ1htKzWbGWO:dPMvA509pkonAhtHbnO

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      be2621a78a13a56cf09e00dd98488360

    • SHA1

      75f0539dc6af200a07cdb056cddddec595c6cfd2

    • SHA256

      852047023ba0cae91c7a43365878613cfb4e64e36ff98c460e113d5088d68ef5

    • SHA512

      b80cf1f678e6885276b9a1bfd9227374b2eb9e38bb20446d52ebe2c3dba89764aa50cb4d49df51a974478f3364b5dbcbc5b4a16dc8f1123b40c89c01725be3d1

    • SSDEEP

      192:eB2HS+ihg200uWz947Wzvxu6v0MI7JOde+Ij5Z77dslFsE+:3S62Gw947ExuGDI7J8EF7KIE

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks