General
- Target 20c650ba6fe0158bf49bf298711fb95f5915dba704169c2443bf921f4852e9fa.exe
- Size 523KB
- Sample260727-cfgyesfr2y
- SHA256 20c650ba6fe0158bf49bf298711fb95f5915dba704169c2443bf921f4852e9fa
Score
10/10
Malware Config
Targets
-
- Target 20c650ba6fe0158bf49bf298711fb95f5915dba704169c2443bf921f4852e9fa.exe
- Size 523KB
- SHA256 20c650ba6fe0158bf49bf298711fb95f5915dba704169c2443bf921f4852e9fa
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
Score3/10