General
- Target cd9b8405e09bed643ec9f4310de2d377b0d686da1dda72bfb7953cda26024868.exe
- Size 382KB
- Sample260810-ytw56axclf
- SHA256 cd9b8405e09bed643ec9f4310de2d377b0d686da1dda72bfb7953cda26024868
Score
10/10
Malware Config
Targets
-
- Target cd9b8405e09bed643ec9f4310de2d377b0d686da1dda72bfb7953cda26024868.exe
- Size 382KB
- SHA256 cd9b8405e09bed643ec9f4310de2d377b0d686da1dda72bfb7953cda26024868
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
Score3/10