Extracted

• • Target

    0c1d8224b50bb8a62879eb83a3579934_JaffaCakes118

  • Size

    68KB

  • MD5

    0c1d8224b50bb8a62879eb83a3579934

  • SHA1

    aecf060c6e027744609ce9b75b2bc091135812b2

  • SHA256

    5ad508430463e238c3d77aba98b288074c5980f72186e8eeda301f0b4f731cc5

  • SHA512

    f53edeee5aefb6ecb9c3a4c9ed1d38d0a96c13a412c0530c8bb0562c580b4d14ee1ca90ca2a0f955d57b041ebcc8035c18e010f6477c5c75e501d68c3e69ec01

  • SSDEEP

    1536:MJTwIg07tUKbRp+CUW9WKKQRKUTg07tUKbRp+:agbKbRnnWKzKygbKbR

  Score

  10^/10

  guloaderdownloader

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

    downloaderguloader

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2