Overview

overview

10

Static

static

3

f351e1c9c3...18.exe

windows7-x64

10

f351e1c9c3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f351e1c9c3ab594f5d6ce3bbcddcd1b0_JaffaCakes118

  • Size

    80KB

  • Sample

    240924-lbkcesyfpl

  • MD5

    f351e1c9c3ab594f5d6ce3bbcddcd1b0

  • SHA1

    6a5e09c8c4014db21604fe55a2c72e01649b63db

  • SHA256

    ff566af9e6b0828e4d4e9d30f1f054a42318ec5d5baeac0ff0962cd30e8cb663

  • SHA512

    d237d016da7cd8a946fb5fd1f70d38250b14ea81533e8fe07bdcaecf2c66b321c78c3f3167a93b17af840a85646c91d6ca3f1ddde5190e7c105423824360c4c0

  • SSDEEP

    768:t1NA1tfb0czIDqlqWJVSMLD/59bZqiAoOPeSErq2drrg3aDjDjHlmXWeoDrFH24:t0tf1R5lLD/5dZoeSErlvnbhDrN

Score
10/10
guloaderdiscoverydownloader

Malware Config

Extracted

Family

guloader

C2

https://tmlawa.entrydns.org/digg/floow_cklibtGw3.bin

xor.base64

Targets

    • Target

      f351e1c9c3ab594f5d6ce3bbcddcd1b0_JaffaCakes118

    • Size

      80KB

    • MD5

      f351e1c9c3ab594f5d6ce3bbcddcd1b0

    • SHA1

      6a5e09c8c4014db21604fe55a2c72e01649b63db

    • SHA256

      ff566af9e6b0828e4d4e9d30f1f054a42318ec5d5baeac0ff0962cd30e8cb663

    • SHA512

      d237d016da7cd8a946fb5fd1f70d38250b14ea81533e8fe07bdcaecf2c66b321c78c3f3167a93b17af840a85646c91d6ca3f1ddde5190e7c105423824360c4c0

    • SSDEEP

      768:t1NA1tfb0czIDqlqWJVSMLD/59bZqiAoOPeSErq2drrg3aDjDjHlmXWeoDrFH24:t0tf1R5lLD/5dZoeSErlvnbhDrN

    Score
    10/10
    guloaderdiscoverydownloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks