General
-
Target
befb40c0a1b8f5f99960dd03fe782e87_JaffaCakes118
-
Size
60KB
-
Sample
240824-ttgm9aydlb
-
MD5
befb40c0a1b8f5f99960dd03fe782e87
-
SHA1
a179ac26a6353b8fee7645105b56ab133be1b0d7
-
SHA256
f7039958e69fd8072335ab11835a5af0482208249af2a9789a41ea92ff79d495
-
SHA512
e2e6143b275c2d6b31bb0aeb1fd7817ec41790efed1751b1b15a4ec178aea7531c301bda36b3f6aa0d6bf7c8fc26731aae5b285c41025a1acdd09c414cc47d50
-
SSDEEP
768:j8gReqSpgsLzjI7kPIt2H+YaXaL5l7NXJFxtR0MH4WKqMfzNS7d2blpsRA8e6U9i:jf5YjIggfjaLrrtR0MYtrNS7AppldS
Malware Config
Extracted
guloader
https://drive.google.com/uc?export=download&id=1MLCjjDez6CHX_73RaJptihCCRAt7lMyi
https://hzz1.at/rochaspa_HKRuWeae151.bin
Targets
-
-
Target
Cerere de oferta cod produs atasat 5673 Request to quote products attached code 5673.exe
-
Size
112KB
-
MD5
c1ad7846ec931d0341856269e6ace0da
-
SHA1
1b098a15473669364077d8f0a467ff1999c87150
-
SHA256
31c0082a2301256d4a530626fcc6d4da7db4ccf0c551db9826641c63a84a766b
-
SHA512
f72be5eb086e6cdc00b49a45865a19ba22e6c19838ac738c146ca8db5d04be9ba822724d3b20550cc879da6755fedbcbfb2a8c863454c098f06b60acd22a97a6
-
SSDEEP
1536:/b6vj0aZjyJc/zUVWtCNY5DmDdg9jeWJbONLYpINoPb:/bu/eG/r5DmDO9jeWJqNLQINoPb
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-