Extracted

• • Target

    ee467fc75976be56bd6efeaa60077b45_JaffaCakes118

  • Size

    136KB

  • MD5

    ee467fc75976be56bd6efeaa60077b45

  • SHA1

    3f1853cadf81ea7a9269548bfe5b80109bbe25d7

  • SHA256

    a9ab46452a78667dfb767d2bf2507c607d818463c8a0b8d87cf3b79335247a3e

  • SHA512

    07144acfcdeda4a62c759b9f06402547f3a3b714825b4fcf65253bbfc897b31556505ba9048957ba3dec2c04e099d5e8ae04d7cbad4548981d5a89c01e6041d1

  • SSDEEP

    1536:tZNsxu9//i3QkgUUUUIL3L9mBAHVwNouvDoMbddzh6sAXjjiJ:tsDaBAHVwNfvEMbDzhyXjC

  Score

  10^/10

  guloaderdiscoverydownloader

  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

    downloaderguloader

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2