Overview

overview

10

Static

static

3

a7d2ea641d...ee.exe

windows7-x64

10

a7d2ea641d...ee.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Beskikning...ls.scr

windows7-x64

Beskikning...ls.scr

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7d2ea641dbc8e50000e6b42c9cca200fa25d5e37ddd1857eb489795ab5564ee.exe

  • Size

    870KB

  • Sample

    240704-caf4yayarp

  • MD5

    95dc64015aa43a27412f7ff0979c5b87

  • SHA1

    bde0ae97f4f98c0dd8a0833702ff073befbec268

  • SHA256

    a7d2ea641dbc8e50000e6b42c9cca200fa25d5e37ddd1857eb489795ab5564ee

  • SHA512

    450a8ba7eb3c3178b5567b692d55518d393af5d971bb22ab13e1c9078c9ea389f1a9e28d391a8882ef8d1b99972ec27af64fa2c7aa8fa79c9c0d2423d0176d10

  • SSDEEP

    12288:XcIjd3nQIQsk3na+QiLPTEYLwdLh5d2tqnXQJgcCp8vGiVIkk84n5QWrV:XcIjUna3iLtwb/2tWXMi2rq7nHB

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      a7d2ea641dbc8e50000e6b42c9cca200fa25d5e37ddd1857eb489795ab5564ee.exe

    • Size

      870KB

    • MD5

      95dc64015aa43a27412f7ff0979c5b87

    • SHA1

      bde0ae97f4f98c0dd8a0833702ff073befbec268

    • SHA256

      a7d2ea641dbc8e50000e6b42c9cca200fa25d5e37ddd1857eb489795ab5564ee

    • SHA512

      450a8ba7eb3c3178b5567b692d55518d393af5d971bb22ab13e1c9078c9ea389f1a9e28d391a8882ef8d1b99972ec27af64fa2c7aa8fa79c9c0d2423d0176d10

    • SSDEEP

      12288:XcIjd3nQIQsk3na+QiLPTEYLwdLh5d2tqnXQJgcCp8vGiVIkk84n5QWrV:XcIjUna3iLtwb/2tWXMi2rq7nHB

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      55a26d7800446f1373056064c64c3ce8

    • SHA1

      80256857e9a0a9c8897923b717f3435295a76002

    • SHA256

      904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8

    • SHA512

      04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b

    • SSDEEP

      192:MPtkumJX7zBE2kGwfy9S9VkPsFQ1Mx1c:97O2k5q9wA1Mxa

    Score
    3/10
    behavioral3behavioral4

    • Target

      Beskikningers/keelhauls.scr

    • Size

      1.0MB

    • MD5

      87a3ce82a211e6022d7145c99eef5edc

    • SHA1

      d2aa5daef3272acdee40657353ebb0ba94728e8d

    • SHA256

      66bf6c84307739696eb18d632b6a34755375e61f3c612dc273c7f8f25fcad938

    • SHA512

      66f2bc1530f6d187749486c7305f069d67964ef5427a6a59f2dc081469f5d608c6e0d2c30edef70a6a79e6386be1528ae2b8725ba704e2d3cf8b2f303d8eb1cf

    • SSDEEP

      768:N9lotXK6U6HA/zmsIxzvraRwfj+iMbmwrhg2hnwjYBm2GOP9bsWZafCJL6Ir7wxG:QRPMLzJ

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Tasks