General

  • Target

    150fd2376495248906fe73ebcb41b3d0e085f00d1a814ef9b0cae8fd211db3ee.exe

  • Size

    1.0MB

  • Sample

    250207-ex4vmaznep

  • MD5

    ad5493b5261351d24d035968b5040724

  • SHA1

    30d188f983a22fa2c10db86c13ca515af02f46f9

  • SHA256

    150fd2376495248906fe73ebcb41b3d0e085f00d1a814ef9b0cae8fd211db3ee

  • SHA512

    fa8095ef44dda4eb8388d9bec7360e12d882cd3173035259e716b9bf2f50924c4f575b0ab8a589397b7cea8c5df8cd3394f9a65fd5715f2adca30b383ef5a4c1

  • SSDEEP

    24576:+5UHg7ycXa8ZYMexXYvRCEOYkYRU2fNYwYtYPY:+uHzfV5ovRH1bqyuXOg

Malware Config

Targets

    • Target

      150fd2376495248906fe73ebcb41b3d0e085f00d1a814ef9b0cae8fd211db3ee.exe

    • Size

      1.0MB

    • MD5

      ad5493b5261351d24d035968b5040724

    • SHA1

      30d188f983a22fa2c10db86c13ca515af02f46f9

    • SHA256

      150fd2376495248906fe73ebcb41b3d0e085f00d1a814ef9b0cae8fd211db3ee

    • SHA512

      fa8095ef44dda4eb8388d9bec7360e12d882cd3173035259e716b9bf2f50924c4f575b0ab8a589397b7cea8c5df8cd3394f9a65fd5715f2adca30b383ef5a4c1

    • SSDEEP

      24576:+5UHg7ycXa8ZYMexXYvRCEOYkYRU2fNYwYtYPY:+uHzfV5ovRH1bqyuXOg

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      cf85183b87314359488b850f9e97a698

    • SHA1

      6b6c790037eec7ebea4d05590359cb4473f19aea

    • SHA256

      3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac

    • SHA512

      fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b

    • SSDEEP

      96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks