General

  • Target

    2ce2b5ae44364fe9c1f5b46600d3baeffb769dea1dc9b25fcd5a9ab747f417e6.exe

  • Size

    1.0MB

  • Sample

    250207-e4hwqsymhw

  • MD5

    62fed8d2f8c74245e366b5ffc4170325

  • SHA1

    c9ad60cf5921d12fed075927b4cf4623d129a671

  • SHA256

    2ce2b5ae44364fe9c1f5b46600d3baeffb769dea1dc9b25fcd5a9ab747f417e6

  • SHA512

    3dd9b6dba45b75f39a6430fa0a6471dbda9b42cea021b37faefd72eb00fc3886b038afb88b51d9dfd6e313e5cdf07fdc33a026b827d3037dcd291e3d2316d714

  • SSDEEP

    24576:+5TSjeuARbeLYMexXYvRCEOYkYRU2fNYwYtYPY:+kjeu0bx5ovRH1bqyuXOg

Malware Config

Targets

    • Target

      2ce2b5ae44364fe9c1f5b46600d3baeffb769dea1dc9b25fcd5a9ab747f417e6.exe

    • Size

      1.0MB

    • MD5

      62fed8d2f8c74245e366b5ffc4170325

    • SHA1

      c9ad60cf5921d12fed075927b4cf4623d129a671

    • SHA256

      2ce2b5ae44364fe9c1f5b46600d3baeffb769dea1dc9b25fcd5a9ab747f417e6

    • SHA512

      3dd9b6dba45b75f39a6430fa0a6471dbda9b42cea021b37faefd72eb00fc3886b038afb88b51d9dfd6e313e5cdf07fdc33a026b827d3037dcd291e3d2316d714

    • SSDEEP

      24576:+5TSjeuARbeLYMexXYvRCEOYkYRU2fNYwYtYPY:+kjeu0bx5ovRH1bqyuXOg

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      cf85183b87314359488b850f9e97a698

    • SHA1

      6b6c790037eec7ebea4d05590359cb4473f19aea

    • SHA256

      3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac

    • SHA512

      fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b

    • SSDEEP

      96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks