Extracted

• • Target

    de6fd9c36399cb4edd4c1ce6a66a020a_JaffaCakes118

  • Size

    80KB

  • MD5

    de6fd9c36399cb4edd4c1ce6a66a020a

  • SHA1

    17e8fbce596328734fc8ccf7a5c4f4067eed5132

  • SHA256

    aec28453ffaa0598b18b653945ed5b11ce928625a881d0ab49b0aad428e4177c

  • SHA512

    f15b17cae3f80ad2a479b863c8aae35a5e794089c7cbb567c0f9746364fdaf82a6378c5a5aaf106a9f269d2bdbd0520f6b557b1e95b39f8edc219d007360dc99

  • SSDEEP

    768:CISDNR2jZX8OgRQTVbc42CMZ7E1XqISDN:C/qR8OgCTK42N7i6/

  Score

  10^/10

  guloaderdiscoverydownloader

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

    downloaderguloader

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2