General
- Target 88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d.exe
- Size 806KB
- Sample260825-cta22a11at
- SHA256 88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d
Score
10/10
Malware Config
Targets
-
- Target 88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d.exe
- Size 806KB
- SHA256 88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Undvrligst130.Gul
- Size 54KB
- SHA256 1c739a595448826a25d50af246010dbb70fd6a78c5af3316509ff2073e5cad2c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.