Overview

overview

10

Static

static

3

AWB DHL 0029301.exe

windows7-x64

10

AWB DHL 0029301.exe

windows10-2004-x64

10

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23122024_0144_AWB DHL 0029301.bat.zip

  • Size

    614KB

  • Sample

    241223-b5y3katnhn

  • MD5

    3973e0d4f66482e1a930bb62229178e1

  • SHA1

    d8a52ac5f78264e0b95447f38ef2ac58d0b47774

  • SHA256

    0aeb8bb857439577aa2123be2dbed3375cfba4cbf1b6b61adccab51630133d6d

  • SHA512

    5f088a37b36be94ad0adece8291e0b19823f64a6aea3a315dd169716fb980ecee7e4b8ae4dd18a2302eb39efb34aa8e17a116ef9db1c1b8c4cbb88f0cf35f64f

  • SSDEEP

    12288:QQM7aYmwRUlSNs0O8c1zf4h4hxmCsXXs56+n3kpT17kE:Qpcrn1zf4hyMXXWn3kX7kE

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      AWB DHL 0029301.bat

    • Size

      760KB

    • MD5

      e66902c532dd0fd4f019200e4599f17c

    • SHA1

      6306e266e3d9dcd3671aa81f77bb7502e3ae76ff

    • SHA256

      81c7f5b291b1fcd6d64f7f12208b0134a8462f156dbda97188ec0ba5ff869478

    • SHA512

      bfc0fb98f0921f370e55fc8d9ad8cd79c0280e0de9e6a49fb28cac5eebdf28e6bf14c5f1b94c23405dd387e5495c5f754568b20600ee7fd449a123a14a3b756d

    • SSDEEP

      12288:9s6eULcXcekO8cHzf2l4t5musvXsD6En3kV117Dd:MMetHzf2l4KvXgn3kJ7Dd

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      174708997758321cf926b69318c6c3f5

    • SHA1

      645488089bf320f6864e0d0bc284c85216e56fbd

    • SHA256

      f577b66492e97c7b8bf515398d8deb745abafd74f56fc03e67fce248ebbeb873

    • SHA512

      214433597e04ca1ff9b4fe092d5d2997707a7c56f0f82c85d586088a200e4455028f3b9427d87b4f06f9252557d5be4b7a9138ea6a8d045df6209421fd8ca054

    • SSDEEP

      48:S46+/ZTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mCofjLl:zDuPbOBtWZBV8jAWiAJCdv2CmpL

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      0ff2d70cfdc8095ea99ca2dabbec3cd7

    • SHA1

      10c51496d37cecd0e8a503a5a9bb2329d9b38116

    • SHA256

      982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b

    • SHA512

      cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e

    • SSDEEP

      192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks