General
- Target 999e654a40aad952b29b6f0f852db2a1_JaffaCakes118
- Size 104KB
- Sample240815-krldzszalk
- SHA256 aba193bf0a1a247eaecf4d520cb3acc71f82b179fd403620e7eb5276ff5b7997
- MD5 999e654a40aad952b29b6f0f852db2a1
- SHA1 d4693a831b44e05f734511a34bcf8b75976d86bb
- SHA512 ff6d4664ff9a52e08f84a0c91ccf3d36ad0cfa9ff512c86a429d07956ae362b60a1626226e1129a0e4b7a8919642656016405e387e2863d8a833aeaf6f1c44d5
- SSDEEP 768:CjLz01OClfdKOn8w+GXPDBBjtcQMv8khbfavCKzmZRK0itAHuY+sQZKJlg8vRDT7:2PQBfSw+AtnM9CvC9ZR8to+CP3hvh8+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
999e654a40aad952b29b6f0f852db2a1_JaffaCakes118.exe
Resource
win7-20240704-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
999e654a40aad952b29b6f0f852db2a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
guloader
C2
-
http://www.aussieadrenaline.com/yh/janomo_LEhYmIpDAY21.bin
xor.base64
Targets
-
- Target 999e654a40aad952b29b6f0f852db2a1_JaffaCakes118
- Size 104KB
- SHA256 aba193bf0a1a247eaecf4d520cb3acc71f82b179fd403620e7eb5276ff5b7997
- MD5 999e654a40aad952b29b6f0f852db2a1
- SHA1 d4693a831b44e05f734511a34bcf8b75976d86bb
- SHA512 ff6d4664ff9a52e08f84a0c91ccf3d36ad0cfa9ff512c86a429d07956ae362b60a1626226e1129a0e4b7a8919642656016405e387e2863d8a833aeaf6f1c44d5
- SSDEEP 768:CjLz01OClfdKOn8w+GXPDBBjtcQMv8khbfavCKzmZRK0itAHuY+sQZKJlg8vRDT7:2PQBfSw+AtnM9CvC9ZR8to+CP3hvh8+
- MD5 SHA1 SHA512 SSDEEP
Score10/10Guloader payload