Overview

overview

10

Static

static

3

e67d5a5be1...e7.exe

windows7-x64

10

e67d5a5be1...e7.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e67d5a5be1e0f1033957b79737340afe9889998f6c2db786144b415ddf202ee7.exe

  • Size

    861KB

  • Sample

    241204-d2m71avpcp

  • MD5

    61518cfded3109fac04ee916ab275c26

  • SHA1

    c624a4ee78183d82fb8264f74953d32ddcae5481

  • SHA256

    e67d5a5be1e0f1033957b79737340afe9889998f6c2db786144b415ddf202ee7

  • SHA512

    478737a68a76e03b10e477a47115eb643e9c7242e5a5d7ef0c635060cb0318fd185c6be59793ba66057f811d6f623c68daabd5dfddcc8c3d4dc4d9b8be7096af

  • SSDEEP

    24576:yiGFaq43NvC7kHJTPrbG4ujTrlq8e+xfJ/QOeaq:yiGFu3Nv3HJTkdde+tJ/qaq

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      e67d5a5be1e0f1033957b79737340afe9889998f6c2db786144b415ddf202ee7.exe

    • Size

      861KB

    • MD5

      61518cfded3109fac04ee916ab275c26

    • SHA1

      c624a4ee78183d82fb8264f74953d32ddcae5481

    • SHA256

      e67d5a5be1e0f1033957b79737340afe9889998f6c2db786144b415ddf202ee7

    • SHA512

      478737a68a76e03b10e477a47115eb643e9c7242e5a5d7ef0c635060cb0318fd185c6be59793ba66057f811d6f623c68daabd5dfddcc8c3d4dc4d9b8be7096af

    • SSDEEP

      24576:yiGFaq43NvC7kHJTPrbG4ujTrlq8e+xfJ/QOeaq:yiGFu3Nv3HJTkdde+tJ/qaq

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      34442e1e0c2870341df55e1b7b3cccdc

    • SHA1

      99b2fa21aead4b6ccd8ff2f6d3d3453a51d9c70c

    • SHA256

      269d232712c86983336badb40b9e55e80052d8389ed095ebf9214964d43b6bb1

    • SHA512

      4a8c57fb12997438b488b862f3fc9dc0f236e07bb47b2bce6053dcb03ac7ad171842f02ac749f02dda4719c681d186330524cd2953d33cb50854844e74b33d51

    • SSDEEP

      192:jPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4I:u7VpNo8gmOyRsVc4

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks