Overview

overview

10

Static

static

3

ad1dfc910b...c6.exe

windows7-x64

10

ad1dfc910b...c6.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad1dfc910b1815aea7983124549d2c04376db9b2249b99e3e672b91df91bfec6.exe

  • Size

    866KB

  • Sample

    250111-ffvq3axmbl

  • MD5

    a09950fd9af3c4e3ff6f778ab5d8ce0f

  • SHA1

    043462f3e5a9b3133908c39e6c3fd8a4f0cade1b

  • SHA256

    ad1dfc910b1815aea7983124549d2c04376db9b2249b99e3e672b91df91bfec6

  • SHA512

    316f36143bfb519a3fd27766960f8c758867da2df52463b7373431c2788811c11823c06fe4934e990102c9c2039feb010a501ddaa99274973dd0024f192fa3c2

  • SSDEEP

    24576:QiGFaq43NvC0vEFsNtiqnRCujTrlLq9u4J/QOeaa:QiGFu3NvnEFsNtRdu9u4J/qaa

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      ad1dfc910b1815aea7983124549d2c04376db9b2249b99e3e672b91df91bfec6.exe

    • Size

      866KB

    • MD5

      a09950fd9af3c4e3ff6f778ab5d8ce0f

    • SHA1

      043462f3e5a9b3133908c39e6c3fd8a4f0cade1b

    • SHA256

      ad1dfc910b1815aea7983124549d2c04376db9b2249b99e3e672b91df91bfec6

    • SHA512

      316f36143bfb519a3fd27766960f8c758867da2df52463b7373431c2788811c11823c06fe4934e990102c9c2039feb010a501ddaa99274973dd0024f192fa3c2

    • SSDEEP

      24576:QiGFaq43NvC0vEFsNtiqnRCujTrlLq9u4J/QOeaa:QiGFu3NvnEFsNtRdu9u4J/qaa

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      34442e1e0c2870341df55e1b7b3cccdc

    • SHA1

      99b2fa21aead4b6ccd8ff2f6d3d3453a51d9c70c

    • SHA256

      269d232712c86983336badb40b9e55e80052d8389ed095ebf9214964d43b6bb1

    • SHA512

      4a8c57fb12997438b488b862f3fc9dc0f236e07bb47b2bce6053dcb03ac7ad171842f02ac749f02dda4719c681d186330524cd2953d33cb50854844e74b33d51

    • SSDEEP

      192:jPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4I:u7VpNo8gmOyRsVc4

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks