Overview

overview

10

Static

static

3

066b848407...54.exe

windows7-x64

10

066b848407...54.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

chechako.com

windows7-x64

chechako.com

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    066b848407c352a6aa9296bdfae6b27cc878fa27e02ec054f758df83f5c44654.exe

  • Size

    694KB

  • Sample

    241203-va7wrszjhk

  • MD5

    f72133731914d36ef205031a0dfbeb11

  • SHA1

    7f74e71b1ca89bbd02272d591629c6e6301115db

  • SHA256

    066b848407c352a6aa9296bdfae6b27cc878fa27e02ec054f758df83f5c44654

  • SHA512

    4f70b2432a1c258fc8a1008f306045587557c33a6fe8522a41288d8987fa7318ce379809cccd985a73e6603b50a16c020067059731294e52ea5ce6db9a537be6

  • SSDEEP

    12288:xQszxdK1xIHkD5/wHBxs5WAjpUnKyWE8NZ30cTdlDjspRaFhCyiNuC:rwcw5DwfWfNp0cTd9utsC

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      066b848407c352a6aa9296bdfae6b27cc878fa27e02ec054f758df83f5c44654.exe

    • Size

      694KB

    • MD5

      f72133731914d36ef205031a0dfbeb11

    • SHA1

      7f74e71b1ca89bbd02272d591629c6e6301115db

    • SHA256

      066b848407c352a6aa9296bdfae6b27cc878fa27e02ec054f758df83f5c44654

    • SHA512

      4f70b2432a1c258fc8a1008f306045587557c33a6fe8522a41288d8987fa7318ce379809cccd985a73e6603b50a16c020067059731294e52ea5ce6db9a537be6

    • SSDEEP

      12288:xQszxdK1xIHkD5/wHBxs5WAjpUnKyWE8NZ30cTdlDjspRaFhCyiNuC:rwcw5DwfWfNp0cTd9utsC

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      4d3b19a81bd51f8ce44b93643a4e3a99

    • SHA1

      35f8b00e85577b014080df98bd2c378351d9b3e9

    • SHA256

      fda0018ab182ac6025d2fc9a2efcce3745d1da21ce5141859f8286cf319a52ce

    • SHA512

      b2ba9c961c0e1617f802990587a9000979ab5cc493ae2f8ca852eb43eeaf24916b0b29057dbff7d41a1797dfb2dce3db41990e8639b8f205771dbec3fd80f622

    • SSDEEP

      192:BPtkumJX7zB22kGwfy0mtVgkCPOse1un:u702k5qpdseQn

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      chechako.com

    • Size

      455KB

    • MD5

      716783bb1d3664c916795e809845bcf9

    • SHA1

      22a0076526207aff8c83250a30dfe3f44cba90a3

    • SHA256

      7628e5edd0245fb03671199dc1f8e7fe18b4cdfcedd9a9569213d8a14a776f88

    • SHA512

      3977ea2c5642f821e46cafe5d71f0457a30b375a1c5599c44f44c220e4751ea2b6bacee16a21bb30297e88ba1cdc9345ca2186b503d2b6be8ee14ecf1b8952fd

    • SSDEEP

      1536:ddmZ/2sgaTmJd0qcED+kbCZznzj/y5kv44558hoY6fEo:ddoTiwHy5kvH6hqfEo

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks