General
-
Target
17726decabe2319d3a12e18ef362bea822b78a29719ccc7fbcc27298d8816f10N.exe
-
Size
813KB
-
Sample
241205-nc5e4axrcm
-
MD5
82f847d7438012fb7aaf92cf0dc2b640
-
SHA1
dea5f43c50f261ed5b36581d5c5d0d53d3956f6b
-
SHA256
17726decabe2319d3a12e18ef362bea822b78a29719ccc7fbcc27298d8816f10
-
SHA512
abdde907593c7c41b7980678fb4847f942212ebd20d93834e7933e1f01cb85cd0e2c7b01f393fd228d9409937ae374c767f794b8cf2a169aea08c33df4a82ac0
-
SSDEEP
24576:GT5ewakMlLQj9cFbRtjD6seSE94Zqq5uIum9:Ub9ajDVum9
Malware Config
Targets
-
-
Target
17726decabe2319d3a12e18ef362bea822b78a29719ccc7fbcc27298d8816f10N.exe
-
Size
813KB
-
MD5
82f847d7438012fb7aaf92cf0dc2b640
-
SHA1
dea5f43c50f261ed5b36581d5c5d0d53d3956f6b
-
SHA256
17726decabe2319d3a12e18ef362bea822b78a29719ccc7fbcc27298d8816f10
-
SHA512
abdde907593c7c41b7980678fb4847f942212ebd20d93834e7933e1f01cb85cd0e2c7b01f393fd228d9409937ae374c767f794b8cf2a169aea08c33df4a82ac0
-
SSDEEP
24576:GT5ewakMlLQj9cFbRtjD6seSE94Zqq5uIum9:Ub9ajDVum9
Score10/10-
Guloader family
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Adds Run key to start application
-
Blocklisted process makes network request
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
d968cb2b98b83c03a9f02dd9b8df97dc
-
SHA1
d784c9b7a92dce58a5038beb62a48ff509e166a0
-
SHA256
a4ec98011ef99e595912718c1a1bf1aa67bfc2192575729d42f559d01f67b95c
-
SHA512
2ee41dc68f329a1519a8073ece7d746c9f3bf45d8ef3b915deb376af37e26074134af5f83c8af0fe0ab227f0d1acca9f37e5ca7ae37c46c3bcc0331fe5e2b97e
-
SSDEEP
192:CVA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:CrR7SrtTv53tdtTgwF4SQbGPX36wJMw
Score3/10 -