Overview

overview

10

Static

static

3

AMOS PO- 2...DF.exe

windows7-x64

10

AMOS PO- 2...DF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1252608aecfa96d0b27ce56be141f09_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240825-t377katcqg

  • MD5

    c1252608aecfa96d0b27ce56be141f09

  • SHA1

    98df0ee4d61f3ec24b242847a023bce8ff3716e9

  • SHA256

    d6813757afcbe2ff75e3c7d249a7f198cd841db9438dd7dc85d7cf377276af00

  • SHA512

    0ed6ba341fc4b171e8d5ad39797acf8e0a08d05521df7476ea90b4cd5a271311707ad8c1716a3ed03b3d66c1dc09b2eb4adb233889ed2804ebb5b49ad7208339

  • SSDEEP

    384:gHF/epx0BzZY2TTZt+XrhWFjaqtFy6rJmBfZ0giSmWDcbnYd7nlwv/VX5:gl/epx0dZY2TTy7Uu6rXgcWwbnSnKvt

Score
10/10
guloaderdiscoverydownloader

Malware Config

Extracted

Family

guloader

C2

https://drive.google.com/uc?export=download&id=1XLfZkhnbdY8eUmrfl4WTeHNxpgUqP4jN

xor.base64

Targets

    • Target

      AMOS PO- 20085 20096 PR #11662526_PDF.exe

    • Size

      36KB

    • MD5

      8a2742a793634a68f07d58ae49f9d7b0

    • SHA1

      e8ad9922b80847ecf6c8bd1e6dff4b9d4cf7bd0e

    • SHA256

      da0971d1e481eb8d5e02d74f90c8705797a8d516f8439ad26e53484e9d3f3895

    • SHA512

      4fec39ace3d00c65be3ded4852736851b9ecde927b09ad5d2a6d2ed4db829e55ab078864b4970962ad7f33ed4997879b29d79b15e5d32b9b915a33b46deec64a

    • SSDEEP

      384:xHF/epx0BzZY2TTZt+XrhWFjaqtFy6rJmBfZ0giSmWDcbnYd7nlwv/VX5:xl/epx0dZY2TTy7Uu6rXgcWwbnSnKvt

    Score
    10/10
    guloaderdiscoverydownloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks