Overview

overview

10

Static

static

3

b7303a968a...fd.exe

windows7-x64

10

b7303a968a...fd.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

enevoldshe...ko.com

windows7-x64

enevoldshe...ko.com

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7303a968a3a0198dce343fcea8e5e11a9ed7dbf8b7515ec12e15c88ed6b42fd.exe

  • Size

    695KB

  • Sample

    241204-dnjbwsynes

  • MD5

    7717d53b780cc8a4cbf0934410d995df

  • SHA1

    ca89543dff270cb6f589c49aaf02b8d6566ae2b8

  • SHA256

    b7303a968a3a0198dce343fcea8e5e11a9ed7dbf8b7515ec12e15c88ed6b42fd

  • SHA512

    fcbdfabd4c5e0ffea81611c0bc7ab029a870b97416f0768cc2d43f24642ed046f7e9b49cf374b1c7371ebe168111feed3712c23c4f413aa0c382e8cc9fb7ba38

  • SSDEEP

    12288:8QszxdK1xIHkD5/wHAlzsyic2NbZWKyWE8N7ccIyJxtDcMdlDjspRaFhCyiNuW:uwcOzsyn25gWfNwcIyJcMd9utsW

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      b7303a968a3a0198dce343fcea8e5e11a9ed7dbf8b7515ec12e15c88ed6b42fd.exe

    • Size

      695KB

    • MD5

      7717d53b780cc8a4cbf0934410d995df

    • SHA1

      ca89543dff270cb6f589c49aaf02b8d6566ae2b8

    • SHA256

      b7303a968a3a0198dce343fcea8e5e11a9ed7dbf8b7515ec12e15c88ed6b42fd

    • SHA512

      fcbdfabd4c5e0ffea81611c0bc7ab029a870b97416f0768cc2d43f24642ed046f7e9b49cf374b1c7371ebe168111feed3712c23c4f413aa0c382e8cc9fb7ba38

    • SSDEEP

      12288:8QszxdK1xIHkD5/wHAlzsyic2NbZWKyWE8N7ccIyJxtDcMdlDjspRaFhCyiNuW:uwcOzsyn25gWfNwcIyJcMd9utsW

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      4d3b19a81bd51f8ce44b93643a4e3a99

    • SHA1

      35f8b00e85577b014080df98bd2c378351d9b3e9

    • SHA256

      fda0018ab182ac6025d2fc9a2efcce3745d1da21ce5141859f8286cf319a52ce

    • SHA512

      b2ba9c961c0e1617f802990587a9000979ab5cc493ae2f8ca852eb43eeaf24916b0b29057dbff7d41a1797dfb2dce3db41990e8639b8f205771dbec3fd80f622

    • SSDEEP

      192:BPtkumJX7zB22kGwfy0mtVgkCPOse1un:u702k5qpdseQn

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      enevoldsherredmmets/chechako.com

    • Size

      455KB

    • MD5

      716783bb1d3664c916795e809845bcf9

    • SHA1

      22a0076526207aff8c83250a30dfe3f44cba90a3

    • SHA256

      7628e5edd0245fb03671199dc1f8e7fe18b4cdfcedd9a9569213d8a14a776f88

    • SHA512

      3977ea2c5642f821e46cafe5d71f0457a30b375a1c5599c44f44c220e4751ea2b6bacee16a21bb30297e88ba1cdc9345ca2186b503d2b6be8ee14ecf1b8952fd

    • SSDEEP

      1536:ddmZ/2sgaTmJd0qcED+kbCZznzj/y5kv44558hoY6fEo:ddoTiwHy5kvH6hqfEo

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks