Overview

overview

10

Static

static

002da5544c...6f.exe

windows7-x64

10

002da5544c...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    002da5544c439873fdeac3e2aa0e64f1928dbffa5699b225ecdb4b9e0f05e56f

  • Size

    120KB

  • Sample

    230129-tyaqhafa6x

  • MD5

    0f8ab5c292125cbf9fd5627c93f4f00b

  • SHA1

    a57f4af2ef17b9584f5cfd1ab326528231a570ec

  • SHA256

    002da5544c439873fdeac3e2aa0e64f1928dbffa5699b225ecdb4b9e0f05e56f

  • SHA512

    627e61fef0ca7f82abe22830453d9806466f58b432def8b5f2235fa4befe48447e492d9fbf11b4e64bd435ad4069b24c2d6fbf68c887c12b8c1d810cba2f819c

  • SSDEEP

    1536:Zk/fQD+j14nyS1wI0Etv7CTIZmneYqxV5aVg:ZkHjlJdYWPoAVg

Score
10/10
guloaderdownloaderguloader

Malware Config

Extracted

Family

guloader

C2

https://21twelveinteractive.com/yj/janomo_wgPYBASsWX114.bin

xor.base64

Targets

    • Target

      002da5544c439873fdeac3e2aa0e64f1928dbffa5699b225ecdb4b9e0f05e56f

    • Size

      120KB

    • MD5

      0f8ab5c292125cbf9fd5627c93f4f00b

    • SHA1

      a57f4af2ef17b9584f5cfd1ab326528231a570ec

    • SHA256

      002da5544c439873fdeac3e2aa0e64f1928dbffa5699b225ecdb4b9e0f05e56f

    • SHA512

      627e61fef0ca7f82abe22830453d9806466f58b432def8b5f2235fa4befe48447e492d9fbf11b4e64bd435ad4069b24c2d6fbf68c887c12b8c1d810cba2f819c

    • SSDEEP

      1536:Zk/fQD+j14nyS1wI0Etv7CTIZmneYqxV5aVg:ZkHjlJdYWPoAVg

    Score
    10/10
    guloaderdownloaderguloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks