Overview

overview

10

Static

static

3

e8d2b06d6d...dN.exe

windows7-x64

10

e8d2b06d6d...dN.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8d2b06d6d1c4b0b94597780e3a5cf9c88e93791253ff7a1202d73bb9423365dN.exe

  • Size

    168KB

  • Sample

    241204-kz4kjawkhj

  • MD5

    2d91318f994a4748a9ae92fb985ad600

  • SHA1

    6cb434e9db3a3012558ace8389c8e44e7f121acb

  • SHA256

    e8d2b06d6d1c4b0b94597780e3a5cf9c88e93791253ff7a1202d73bb9423365d

  • SHA512

    f64411f6a318216bc19ae9d97d0c1e20eea5fa635c7e8d74822c697d8aa09e591ec43a2cd96c16a47a51132aa0d0ec88de590680e16b5c7ea5d7aa2977b09f7c

  • SSDEEP

    3072:PPjxQCdIyVliXEcmIVk4wrWtdkwxWrEm7dl561Sv9EilT0vHKDp0PXjcGQ1z:PDfeitwxKPziSv9EilTOHKDWPTcGqz

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      e8d2b06d6d1c4b0b94597780e3a5cf9c88e93791253ff7a1202d73bb9423365dN.exe

    • Size

      168KB

    • MD5

      2d91318f994a4748a9ae92fb985ad600

    • SHA1

      6cb434e9db3a3012558ace8389c8e44e7f121acb

    • SHA256

      e8d2b06d6d1c4b0b94597780e3a5cf9c88e93791253ff7a1202d73bb9423365d

    • SHA512

      f64411f6a318216bc19ae9d97d0c1e20eea5fa635c7e8d74822c697d8aa09e591ec43a2cd96c16a47a51132aa0d0ec88de590680e16b5c7ea5d7aa2977b09f7c

    • SSDEEP

      3072:PPjxQCdIyVliXEcmIVk4wrWtdkwxWrEm7dl561Sv9EilT0vHKDp0PXjcGQ1z:PDfeitwxKPziSv9EilTOHKDWPTcGqz

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      792b6f86e296d3904285b2bf67ccd7e0

    • SHA1

      966b16f84697552747e0ddd19a4ba8ab5083af31

    • SHA256

      c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917

    • SHA512

      97edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c

    • SSDEEP

      192:rFiQJ771Jt17C8F1A5xjGNNvgFOiLb7lrT/L93:X71Jt48F2eNvgFF/L

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks