General

  • Target

    4b6f906654e77aff5dce0d3c885fbe5f246f91f701b10510492ccc85bfcd0a35

  • Size

    96KB

  • Sample

    230129-tybb2adf64

  • MD5

    aa0c7f816d567d64f5f8239e31810bc2

  • SHA1

    78f7ffa89a6db4a7dcd68b336e81bf931ca3acad

  • SHA256

    4b6f906654e77aff5dce0d3c885fbe5f246f91f701b10510492ccc85bfcd0a35

  • SHA512

    f142655218dfc79ffed3d64cb51cb028fb1685209fec7b05f6fcb87fba6fd5a5b9ae72c3db8fe004289ed0c312a613ac643ce011eaa1c26ab8cf09f2f02cc06c

  • SSDEEP

    1536:w2xmcuHmk6DM5gpuo5J6ihRU7fP/bJ1P7Phz:hJZDMOuwna7fPrPF

Malware Config

Extracted

Family

guloader

C2

https://21twelveinteractive.com/fg/janomo_HrgqGK154.bin

xor.base64

Targets

    • Target

      4b6f906654e77aff5dce0d3c885fbe5f246f91f701b10510492ccc85bfcd0a35

    • Size

      96KB

    • MD5

      aa0c7f816d567d64f5f8239e31810bc2

    • SHA1

      78f7ffa89a6db4a7dcd68b336e81bf931ca3acad

    • SHA256

      4b6f906654e77aff5dce0d3c885fbe5f246f91f701b10510492ccc85bfcd0a35

    • SHA512

      f142655218dfc79ffed3d64cb51cb028fb1685209fec7b05f6fcb87fba6fd5a5b9ae72c3db8fe004289ed0c312a613ac643ce011eaa1c26ab8cf09f2f02cc06c

    • SSDEEP

      1536:w2xmcuHmk6DM5gpuo5J6ihRU7fP/bJ1P7Phz:hJZDMOuwna7fPrPF

MITRE ATT&CK Matrix

Tasks