Analysis
-
max time kernel
93s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10-01-2025 15:32
General
-
Target
nan-Swift-outgoing-message_Payment-Notification-XXXXXMSG0073728273736_OCTOBER18-2021.exe
-
Size
136KB
-
MD5
46b2a9712e812cd3c3590846752deded
-
SHA1
2ea6c7226b8094924729ff9f7e160184b6c0df05
-
SHA256
7c33ad9e76dd1b6757ebad8b8838c0d81c7d3a223baf021f5032550a2a28ebfa
-
SHA512
4037970ad03c45955d89223d6f2d3a952ea0a5bb90cfbd6757b75ac61ba35432e6104ecd464cf984c0e36828b104b0b768cbc0550d2962caa25ef40654e9ac7d
-
SSDEEP
1536:m41u3raOE3N7cuwoYIMFo0aQp2ZUSby46FB8kPD:vu7edao0aQpaUmy46FqkP
Score
10/10
Malware Config
Signatures
-
Guloader family
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\nan-Swift-outgoing-message_Payment-Notification-XXXXXMSG0073728273736_OCTOBER18-2021.exe"C:\Users\Admin\AppData\Local\Temp\nan-Swift-outgoing-message_Payment-Notification-XXXXXMSG0073728273736_OCTOBER18-2021.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
-
Filesize
116KB