Overview

overview

10

Static

static

3

f35fac8e2c...cN.exe

windows7-x64

10

f35fac8e2c...cN.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f35fac8e2c032a3c86b0e53fd04dc1007d951b13436e9b120ccdb7f4f9903b1cN.exe

  • Size

    633KB

  • Sample

    241129-f9k4qatpap

  • MD5

    1c95531a943e71d70afbb794ced49070

  • SHA1

    6e0ad1a65c6c318e308a17a736374aeec23419e1

  • SHA256

    f35fac8e2c032a3c86b0e53fd04dc1007d951b13436e9b120ccdb7f4f9903b1c

  • SHA512

    f8227f7828548d3284da309646f39c5f8c7184bdfdaa984ceca1ac32340f53be9f7e7eee77212fa6192b03c677f7323775f822b916a076caf74a7cf173940021

  • SSDEEP

    12288:g33KGpVvqisW42Vj4Y1x6NqWHXzVhUIxFYv7PFBUJ/uLlbC/k:6VDTFrQRRxs7hLlT

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      f35fac8e2c032a3c86b0e53fd04dc1007d951b13436e9b120ccdb7f4f9903b1cN.exe

    • Size

      633KB

    • MD5

      1c95531a943e71d70afbb794ced49070

    • SHA1

      6e0ad1a65c6c318e308a17a736374aeec23419e1

    • SHA256

      f35fac8e2c032a3c86b0e53fd04dc1007d951b13436e9b120ccdb7f4f9903b1c

    • SHA512

      f8227f7828548d3284da309646f39c5f8c7184bdfdaa984ceca1ac32340f53be9f7e7eee77212fa6192b03c677f7323775f822b916a076caf74a7cf173940021

    • SSDEEP

      12288:g33KGpVvqisW42Vj4Y1x6NqWHXzVhUIxFYv7PFBUJ/uLlbC/k:6VDTFrQRRxs7hLlT

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      12b140583e3273ee1f65016becea58c4

    • SHA1

      92df24d11797fefd2e1f8d29be9dfd67c56c1ada

    • SHA256

      014f1dfeb842cf7265a3644bc6903c592abe9049bfc7396829172d3d72c4d042

    • SHA512

      49ffdfa1941361430b6acb3555fd3aa05e4120f28cbdf7ceaa2af5937d0b8cccd84471cf63f06f97cf203b4aa20f226bdad082e9421b8e6b62ab6e1e9fc1e68a

    • SSDEEP

      192:gFiQJ77pJp17C8F1A5xjGNxrgFOgb7lrT/nC93:E7pJp48F2exrg5F/C

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks