Overview

overview

10

Static

static

3

PO-9AHFFDH...49.exe

windows7-x64

10

PO-9AHFFDH...49.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2be3659866496d1f6eff4e43568fba5e61414378684b95a20c5c2bd5ef4d45d2

  • Size

    540KB

  • Sample

    250221-1jppfaspy3

  • MD5

    0838357a5a9a2bc3cc4cc2536467d119

  • SHA1

    374a64c6b3b4b1f679abda13128df4c148cc6038

  • SHA256

    2be3659866496d1f6eff4e43568fba5e61414378684b95a20c5c2bd5ef4d45d2

  • SHA512

    8f9c8a6f2fb1b014b57e8cd4fd467f47889f4e5baff911d9b4e2c1f1be696794e3d0967f7363d8286b867bb67ad878a2ed58e57d706be28ceed0ae6dd0e6670d

  • SSDEEP

    12288:rHNgodlNudlqKh71o2rHBwzAqqLnS+ixZprr7PfqzC8gvs3fSX:rtzlwdlgcHBwzAfLngxX3qzC8gvGaX

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      PO-9AHFFDH-H4747849.exe

    • Size

      675KB

    • MD5

      7dd465a931791e7bed441c1496e45c1c

    • SHA1

      7c7887c183bedbb06390e8b6bbccb87cd0e39491

    • SHA256

      cb26a50bee3e03bc5563d78899ec5cad699ac135308461d6281e3eff868f16d0

    • SHA512

      fbb45f9f87a89dbfb5b33ffd40e123a95922e05c6fc0db2f200c300951c6e720d0ec84b4661e4fa359cfda573c58829266a2fc60386bce6e80f99fbf10079d6c

    • SSDEEP

      12288:GFgYxnPtmAhtPoOhRBwlA+OLLU+ivZjrr/TfqJC8g7s3XSo:aVhcGRBwlARLLoPzrqJC8g7GCo

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      0063d48afe5a0cdc02833145667b6641

    • SHA1

      e7eb614805d183ecb1127c62decb1a6be1b4f7a8

    • SHA256

      ac9dfe3b35ea4b8932536ed7406c29a432976b685cc5322f94ef93df920fede7

    • SHA512

      71cbbcaeb345e09306e368717ea0503fe8df485be2e95200febc61bcd8ba74fb4211cd263c232f148c0123f6c6f2e3fd4ea20bdecc4070f5208c35c6920240f0

    • SSDEEP

      192:qPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4U:F7VpNo8gmOyRsVc4

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks