General

  • Target

    JaffaCakes118_cbe3e75cfa4cc5982f4c4482311ca1eb9ea6f9da13ddcae3c3f72a08224bac98

  • Size

    202KB

  • Sample

    241222-k9eddsspfr

  • MD5

    ce8c21ddb52f698861807c05d91b7217

  • SHA1

    cf29a9ffa5ff375310a197e7a34a2fd329a39afd

  • SHA256

    cbe3e75cfa4cc5982f4c4482311ca1eb9ea6f9da13ddcae3c3f72a08224bac98

  • SHA512

    75e47aac326ab6eda5affe4d39ea800b94ba050fe1300b004bbc0eb7505d67d7ea3b88408600639100cba7822a49bcd134d107b4f0318be022f2e5e08e1ec8d7

  • SSDEEP

    6144:0dpa6S80PXmUovmHbP/Jw0FI+UMtfRQUO16N:eJSzXEvmH7/VvHfiUT

Malware Config

Targets

    • Target

      50595_1570 - JSV.pdf.exe

    • Size

      315KB

    • MD5

      054c074f443d2413b39ac240c0361668

    • SHA1

      f121a904e1bbedfa35607465a40b10927152e304

    • SHA256

      c7a666f4adb02ba6a0bfbf3511b2695ce654324530d4a168c1af8f907b3cf918

    • SHA512

      e4d388611383ef0183019117c5c7cba5c2285a88898595c3f4194e15b5877fc578d050bd262f2e95425869bbe8de1fc05947dec8e783cf81d72d93b6471b7771

    • SSDEEP

      6144:hhgqhw9oAFPZVheNA+ff0R9CS+nv7ACMCgC9:Uqknhe2e69Ctv7JMCj

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      a4dd044bcd94e9b3370ccf095b31f896

    • SHA1

      17c78201323ab2095bc53184aa8267c9187d5173

    • SHA256

      2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc

    • SHA512

      87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a

    • SSDEEP

      192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks