General
- Target 044e045a439091b9af74217fb82a0493bf0f2e23b3a287172a6ac22a0d9541b3.exe
- Size 313KB
- Sample260727-asrx2sfk8s
- SHA256 044e045a439091b9af74217fb82a0493bf0f2e23b3a287172a6ac22a0d9541b3
Score
10/10
Malware Config
Targets
-
- Target 044e045a439091b9af74217fb82a0493bf0f2e23b3a287172a6ac22a0d9541b3.exe
- Size 313KB
- SHA256 044e045a439091b9af74217fb82a0493bf0f2e23b3a287172a6ac22a0d9541b3
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
Score3/10