General
- Target 8fa37075a67ff2c04945fbb4ea35cf97ff33bff68665448415427508e36b6032.exe
- Size 266KB
- Sample260508-pndbescw6p
- SHA256 8fa37075a67ff2c04945fbb4ea35cf97ff33bff68665448415427508e36b6032
Score
10/10
Malware Config
Targets
-
- Target 8fa37075a67ff2c04945fbb4ea35cf97ff33bff68665448415427508e36b6032.exe
- Size 266KB
- SHA256 8fa37075a67ff2c04945fbb4ea35cf97ff33bff68665448415427508e36b6032
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 c5ba017732597a82f695b084d1aa7fe3b356168cc66105b9392a9c5b06be5188
Score3/10