General
- Target dcb9572d37da18bfe44787c69fd2953f8a31790908b50b492a58281ed2b66662.exe
- Size 1.1MB
- Sample260810-vr54hahe23
- SHA256 dcb9572d37da18bfe44787c69fd2953f8a31790908b50b492a58281ed2b66662
Score
10/10
Malware Config
Targets
-
- Target dcb9572d37da18bfe44787c69fd2953f8a31790908b50b492a58281ed2b66662.exe
- Size 1.1MB
- SHA256 dcb9572d37da18bfe44787c69fd2953f8a31790908b50b492a58281ed2b66662
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
Score3/10