guloader | bb08289230d6cc288fbc30e8bdde67bebdb656628ee118fa8d38baf9eb2d5086 | Triage

Sharing

General

Target

65e241e8d6e9ec4fd4f19cf7e299c72f_JaffaCakes118
Size

64KB
Sample

240522-d8tclaah35
MD5

65e241e8d6e9ec4fd4f19cf7e299c72f
SHA1

bbf1ce8d379045efbba67974a0c8a7fb4cff1da6
SHA256

bb08289230d6cc288fbc30e8bdde67bebdb656628ee118fa8d38baf9eb2d5086
SHA512

ad7e59da7c19421a6c6b16891669bee06799f7bd3052f409cc6f4049211e1280df26f34dee3e8a0768461703493a0fda428fa86fe5cd2ed657a15da4502688ee
SSDEEP

384:l9FTR2wm+PDoGW7Wc/wWv+IJ23aLaddg3MxXts0uNxH9z33LVXURzD7jF:pTR2wv7oGWB/dv+pHXtINxH533mRnP

Score

10^/10

guloader downloader

Malware Config

Extracted

Family

guloader

C2

https://onedrive.live.com/download?cid=618391B69828CF46&resid=618391B69828CF46%21116&authkey=AFIe13OF4pl0MRQ

xor.base64

Targets

- Target
  
  65e241e8d6e9ec4fd4f19cf7e299c72f_JaffaCakes118
- Size
  
  64KB
- MD5
  
  65e241e8d6e9ec4fd4f19cf7e299c72f
- SHA1
  
  bbf1ce8d379045efbba67974a0c8a7fb4cff1da6
- SHA256
  
  bb08289230d6cc288fbc30e8bdde67bebdb656628ee118fa8d38baf9eb2d5086
- SHA512
  
  ad7e59da7c19421a6c6b16891669bee06799f7bd3052f409cc6f4049211e1280df26f34dee3e8a0768461703493a0fda428fa86fe5cd2ed657a15da4502688ee
- SSDEEP
  
  384:l9FTR2wm+PDoGW7Wc/wWv+IJ23aLaddg3MxXts0uNxH9z33LVXURzD7jF:pTR2wv7oGWB/dv+pHXtINxH533mRnP
Score

10^/10

guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloader

behavioral2

guloaderdownloader