General

  • Target

    szerződés-pdf.bat

  • Size

    811KB

  • Sample

    250326-kk6rcazwg1

  • MD5

    8c9a9c036d90711993d0fa59761035fc

  • SHA1

    9fb68ab16c2be99334b2436c5222e3cb75e4fa2c

  • SHA256

    0967e819ae99a6ff7e6e5d1320f6627e25bb643eff4b3cc21f8002fc2eda272e

  • SHA512

    96721499a6e6b891b0c644f506acb124b9f880c0a58e5980047ef5b013455f2902d8d710ac8e969b6d5e0e36f9bf1bab3e54047743757d2e09e3c951969f9e89

  • SSDEEP

    24576:mdYAD9m2Yf+DlEhoicwrJnj+XjBxhaYPAYGuxcDKLT:mX9mfhoizRyXHC/DKLT

Malware Config

Targets

    • Target

      szerződés-pdf.bat

    • Size

      811KB

    • MD5

      8c9a9c036d90711993d0fa59761035fc

    • SHA1

      9fb68ab16c2be99334b2436c5222e3cb75e4fa2c

    • SHA256

      0967e819ae99a6ff7e6e5d1320f6627e25bb643eff4b3cc21f8002fc2eda272e

    • SHA512

      96721499a6e6b891b0c644f506acb124b9f880c0a58e5980047ef5b013455f2902d8d710ac8e969b6d5e0e36f9bf1bab3e54047743757d2e09e3c951969f9e89

    • SSDEEP

      24576:mdYAD9m2Yf+DlEhoicwrJnj+XjBxhaYPAYGuxcDKLT:mX9mfhoizRyXHC/DKLT

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      9625d5b1754bc4ff29281d415d27a0fd

    • SHA1

      80e85afc5cccd4c0a3775edbb90595a1a59f5ce0

    • SHA256

      c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448

    • SHA512

      dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b

    • SSDEEP

      192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.