General
-
Target
JaffaCakes118_4d99dbdd282865eaf0dc3fd76d9eb031a3e1565d6e8e3101da0009262aa16872
-
Size
154KB
-
Sample
241222-1f89nszlet
-
MD5
0920cdd96845a859bc318abae66e3ddc
-
SHA1
f0fb0c6597058840b9e3f468356b49515a495d2c
-
SHA256
4d99dbdd282865eaf0dc3fd76d9eb031a3e1565d6e8e3101da0009262aa16872
-
SHA512
85ef1c2365e314bed1df60860fd13ecad3871d92fd4b134f2399eb53e304eb8d077d2ade15929577e5435ff29fb06b26def3914d96ae81f3a372376191f8dda6
-
SSDEEP
3072:OZsmJ/TGGgyay4fXt9gqsRYPiirtSmNt8smOQxMxMHbU/1XKZyo:OZHH4f9pv94mNGsmCyHqFKZyo
Static task
static1
Behavioral task
behavioral1
Sample
07b35bc0d76eebc56cd228b1212d08f693cbefcad6878970b626b0ac1809a55b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07b35bc0d76eebc56cd228b1212d08f693cbefcad6878970b626b0ac1809a55b.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
07b35bc0d76eebc56cd228b1212d08f693cbefcad6878970b626b0ac1809a55b
-
Size
269KB
-
MD5
d2e31c73af82cd670b487cf9bb5daf7f
-
SHA1
7954c56dc41baff77c51d9b52626fe8bb9298751
-
SHA256
07b35bc0d76eebc56cd228b1212d08f693cbefcad6878970b626b0ac1809a55b
-
SHA512
e682bb8137a21956e37594bbd1a20007a9f6938ef56db9be19dea04b8e61584db398a81dbf6c842c24deb705150d4f38403143dff33d38b250aefcfd7abd44e7
-
SSDEEP
6144:X1ssjw8OeS6xxJUwM5ew23FIgWcU7ipzWKXzY:usketJUB5ew2yuU7iNfE
Score10/10-
Guloader family
-
Checks QEMU agent file
Checks presence of QEMU agent, possibly to detect virtualization.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
792b6f86e296d3904285b2bf67ccd7e0
-
SHA1
966b16f84697552747e0ddd19a4ba8ab5083af31
-
SHA256
c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917
-
SHA512
97edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c
-
SSDEEP
192:rFiQJ771Jt17C8F1A5xjGNNvgFOiLb7lrT/L93:X71Jt48F2eNvgFF/L
Score3/10 -