General
- Target 6721d6b0ed68abe2669a5e8cb5b5c2c56e6388db7c643619c14bd8436aa255e1.exe
- Size 669KB
- Sample260825-c4d7fawdke
- SHA256 6721d6b0ed68abe2669a5e8cb5b5c2c56e6388db7c643619c14bd8436aa255e1
Score
10/10
Malware Config
Targets
-
- Target 6721d6b0ed68abe2669a5e8cb5b5c2c56e6388db7c643619c14bd8436aa255e1.exe
- Size 669KB
- SHA256 6721d6b0ed68abe2669a5e8cb5b5c2c56e6388db7c643619c14bd8436aa255e1
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
Score3/10