Overview

overview

10

Static

static

3

7263a8930a...c9.exe

windows7-x64

10

7263a8930a...c9.exe

windows10-2004-x64

10

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7263a8930afb910d367c5e228694a8c291c8f797e87c082583bcb425fdc525c9.exe

  • Size

    734KB

  • Sample

    241127-c6qcgszjdj

  • MD5

    0c9009a01f16ae4f68f806f30fad5ed2

  • SHA1

    c92ad48134ec43427462c3657cd229dd31e239df

  • SHA256

    7263a8930afb910d367c5e228694a8c291c8f797e87c082583bcb425fdc525c9

  • SHA512

    d894bb452e05548a757bfbd8ddc0c3b55686690923ca01c58e68d399afe88d5d013076fcf83fcb51483e887373ad5bc76671998b3b738cd01c5752511a10db63

  • SSDEEP

    12288:EI0YglGokRtZYxDuT5+tofxytZ4FbVjLfWJRuDnEFGuAY2eAuVLZEqhaH/e5rS++:EI0blXUEx4+ptZ4/WJAgHA8AuVLZEkLm

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      7263a8930afb910d367c5e228694a8c291c8f797e87c082583bcb425fdc525c9.exe

    • Size

      734KB

    • MD5

      0c9009a01f16ae4f68f806f30fad5ed2

    • SHA1

      c92ad48134ec43427462c3657cd229dd31e239df

    • SHA256

      7263a8930afb910d367c5e228694a8c291c8f797e87c082583bcb425fdc525c9

    • SHA512

      d894bb452e05548a757bfbd8ddc0c3b55686690923ca01c58e68d399afe88d5d013076fcf83fcb51483e887373ad5bc76671998b3b738cd01c5752511a10db63

    • SSDEEP

      12288:EI0YglGokRtZYxDuT5+tofxytZ4FbVjLfWJRuDnEFGuAY2eAuVLZEqhaH/e5rS++:EI0blXUEx4+ptZ4/WJAgHA8AuVLZEkLm

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      c5351b7c9aa48e9e7872288a3e7dd583

    • SHA1

      69efcf341345625a4a855f03f2a9d9e8f50319b2

    • SHA256

      982954ea90a10844bff23d595ac2449c6fae300aee2ab4c23077aac1197b7c2e

    • SHA512

      6e655e02aa05bc52beec428686622c4c1c1ffc7e5aba0f6d429495cba29bee5733b26ac7aecbeaa9e525eae52706a2513035d17cc7b0ccbcf792c765c9427d7b

    • SSDEEP

      48:SFPPhYdei1W0Moh82rI7+S2QWviyviU1qeePWfhfof3mkV:+BFi1e12rI7+TvpQeh

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c61501f07cf09bcfcdfe4cc8a1ebbbe3

    • SHA1

      e8581b4359651b857646ae727efaaef372daa0fc

    • SHA256

      7e75f148920db6300dad5a1c12fd5d6eecc95698a310a01311181bc98a704d55

    • SHA512

      9837abe7ec3fa0f1f5193968d12b7ca1893e34eddf628db1f7ab6715b4de339231f0ec1b5f0f86c767f5a30c40da5c4a95e99deedd22eece93cb0d00539aad24

    • SSDEEP

      192:Kk09rQDenC9VrcK7REgSWOprANupQYLRszDDH/d9CWlXo7U6Wxf:Kk0JQEaVAK7R9SfpjpQYLRszfH/d9CWv

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks