Overview

overview

10

Static

static

3

P52mX04112...83.exe

windows7-x64

10

P52mX04112...83.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    P52mX04112024145925383.exe

  • Size

    626KB

  • Sample

    241111-rszrbs1ame

  • MD5

    21a40091e05d06c9480da0fb7a8add87

  • SHA1

    186ae82d5cdb969c28e8111af7ea638d98bfdc69

  • SHA256

    0d9e0293185f77ef323b8686cabcd7e7562af2899bf565ccef257d4b259c7b81

  • SHA512

    e11417ff36d3dfe3c92ba560ca3bd0d75e71b005b38f54ba6e775cfecd9b1f41bbe34544b359967f8a13d96f1b93f6c2d36467ed0cc161fad6d6760c4a886f47

  • SSDEEP

    12288:qic8iBU0BzGGCyDEWqNF2V0/gQashpX7IBy9VoF15NO7nxZ6GLKaDP:qic8GU0AGaO0/gQashpMy9VUgjf6G2a

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      P52mX04112024145925383.exe

    • Size

      626KB

    • MD5

      21a40091e05d06c9480da0fb7a8add87

    • SHA1

      186ae82d5cdb969c28e8111af7ea638d98bfdc69

    • SHA256

      0d9e0293185f77ef323b8686cabcd7e7562af2899bf565ccef257d4b259c7b81

    • SHA512

      e11417ff36d3dfe3c92ba560ca3bd0d75e71b005b38f54ba6e775cfecd9b1f41bbe34544b359967f8a13d96f1b93f6c2d36467ed0cc161fad6d6760c4a886f47

    • SSDEEP

      12288:qic8iBU0BzGGCyDEWqNF2V0/gQashpX7IBy9VoF15NO7nxZ6GLKaDP:qic8GU0AGaO0/gQashpMy9VUgjf6G2a

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      d968cb2b98b83c03a9f02dd9b8df97dc

    • SHA1

      d784c9b7a92dce58a5038beb62a48ff509e166a0

    • SHA256

      a4ec98011ef99e595912718c1a1bf1aa67bfc2192575729d42f559d01f67b95c

    • SHA512

      2ee41dc68f329a1519a8073ece7d746c9f3bf45d8ef3b915deb376af37e26074134af5f83c8af0fe0ab227f0d1acca9f37e5ca7ae37c46c3bcc0331fe5e2b97e

    • SSDEEP

      192:CVA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:CrR7SrtTv53tdtTgwF4SQbGPX36wJMw

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks