General
- Target 2aeb12afcb6e7eedd462e05947a8973faa1e334b73646901bb5a66fbe323739f.exe
- Size 515KB
- Sample260727-c5mj7svsf1
- SHA256 2aeb12afcb6e7eedd462e05947a8973faa1e334b73646901bb5a66fbe323739f
Score
10/10
Malware Config
Targets
-
- Target 2aeb12afcb6e7eedd462e05947a8973faa1e334b73646901bb5a66fbe323739f.exe
- Size 515KB
- SHA256 2aeb12afcb6e7eedd462e05947a8973faa1e334b73646901bb5a66fbe323739f
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 feb6364375d0ab081e9cdf11271c40cb966af295c600903383b0730f0821c0be
Score3/10