Overview

overview

10

Static

static

3

Doc4736478...22.exe

windows7-x64

7

Doc4736478...22.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Tandan7/vm...ts.dll

windows7-x64

1

Tandan7/vm...ts.dll

windows10-2004-x64

1

hyperbarba...-1.dll

windows7-x64

1

hyperbarba...-1.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    22bdec013954160291c36c833a788b59c40d6758443418cf7a206f549f3d4873
  • Size 552KB
  • Sample241221-tqb9cssphr
  • SHA256 22bdec013954160291c36c833a788b59c40d6758443418cf7a206f549f3d4873
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target
      Doc4736478384775837642_JULY 2022.bin
    • Size 620KB
    • SHA256 73c90df4f49a9c5cc0b0e848dd4052b26335959618df392912982fd1ea15147b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoveryguloaderdownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      Tandan7/vm3ddevapi64-stats.dll
    • Size 283KB
    • SHA256 a122dbf6e788346be9f602fb34008dea9bda31891b288819d479f70e4aa154a7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5behavioral6
    • Target
      hyperbarbarous/libbz2-1.dll
    • Size 96KB
    • SHA256 e996e8d18fa41407d80680adb9e416d916f7320e4559485ce3e3e5de811dca1d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks