Overview

overview

10

Static

static

3

disowning.exe

windows7-x64

10

disowning.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43f2bd25874e4ecb4c701829f303fe0b_JaffaCakes118

  • Size

    181KB

  • Sample

    240714-c2f81stcnk

  • MD5

    43f2bd25874e4ecb4c701829f303fe0b

  • SHA1

    54ad40f0e6fe94105cea33b1325512493e8e2a0d

  • SHA256

    20de23b25fc38f4cdfa3a3a98ce5061cce76e0572e14f8ffa80b4d96c1b2627b

  • SHA512

    fe3af92382a3cc18f2dc1d5891880cf362f8826a54c1a0a3f3b714e6f2f4647b0823728e476b4e9c806654f891a11aa45d4a5b71ac75d7026ad75b78a0932c3e

  • SSDEEP

    1536:rVc/OSY309GIIbVNGAkg4g85eSlqygC97AseZxd85apCUToMBkHGfJBwdD7XIlTE:rVc/0kG9lOed5ZxC5uFaSBw+EuC

Score
10/10
guloaderdownloaderguloader

Malware Config

Extracted

Family

guloader

C2

https://drive.google.com/uc?export=download&id=1hK-9mayJIVhEJMRlkvzVXAfjNg5OHUWX

xor.base64

Targets

    • Target

      disowning.exe

    • Size

      124KB

    • MD5

      35e79713151bb8248daf6d230198d391

    • SHA1

      ab791f1006ba6c548f073618e0c5815a1afb3e45

    • SHA256

      308fd79af29c78bc4f0f98b11edebc5c574b6f33b35e9eec7c1fe1d5aad39bab

    • SHA512

      4d7e5939300efc076e5b6ced1273fb78ee2787e4f0ab688f627bfc8b4d3511509b43fa268263d3a0b447b1894785f593cd6bb916a875dce4817baca8d6026c83

    • SSDEEP

      768:SxG05+YThHcuLHErDJ6rNPc7OsWwa5X/SNXFxUmOmpzImQ4PAmMX9VjWP4wxVXWi:kG4RcuLI4NkPOl/TmQpmMXwXRBczf+

    Score
    10/10
    guloaderdownloaderguloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks