Overview

overview

10

Static

static

3

extracted_at_0x0.exe

windows7-x64

10

extracted_at_0x0.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Lib.Platfo...ve.dll

windows7-x64

1

Lib.Platfo...ve.dll

windows10-2004-x64

1

vmxnet3.html

windows7-x64

3

vmxnet3.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f97e7763f53610fb7915fa5ee7d0fd649749281f6ea3c6774d044c641cc32a86

  • Size

    338KB

  • Sample

    241222-kgfezs1lgw

  • MD5

    7d3a374530eca69928f7ecb004b261de

  • SHA1

    641e6186958df82256d6b08672145a02386a5530

  • SHA256

    f97e7763f53610fb7915fa5ee7d0fd649749281f6ea3c6774d044c641cc32a86

  • SHA512

    222a12a540aabb80d5e5eb0c116952b6dcb844c3e1d855fcd96fdc0093d329b7d3ddcf987f4f1e594dcabfebe56eb51caac43d0482ee5f8810d7114db8feea24

  • SSDEEP

    6144:NH++174+frkj3qNyMa3cbOr0HZh7NEr67w8UsmRv3StGoj7LK6HsFR04GiGNV4/y:NH++1U+fgXro0OwImRv0fLKbR04G3V4K

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      extracted_at_0x0.exe.bin

    • Size

      474KB

    • MD5

      cbd03b0128ec974c983c0604d4319536

    • SHA1

      19bd4374de4f58df2a303a68a22df8ffd23a51b8

    • SHA256

      0d49d91ede6737be9e75bac99701a344b3a8a32acaf95e452a8888521481e15d

    • SHA512

      ee4970768b92c24adae33c1b0c3cf9e4957d3c6d52c1915caa95cb4fca5e566965d024bf4856ed90c531b5550ba49d2d91eea87eca45e7cb0f6dbb9e2ddb3914

    • SSDEEP

      6144:ZtXZXzWCOd3DgW86qeVRvnx051WPKOV1mDVa1rqWvzN1R4Uz4JSvkxYTpPnc/vfh:ZtZ4z60DxK1WSEUa1rJ1+c44JnW9f

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      7399323923e3946fe9140132ac388132

    • SHA1

      728257d06c452449b1241769b459f091aabcffc5

    • SHA256

      5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3

    • SHA512

      d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1

    • SSDEEP

      192:eF2HS5ih/7i00dWz9T7PH6lOFcQMI5+Vw+bPFomi7dJWsP:rSUmlw9T7DmnI5+N273FP

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      Lib.Platform.Windows.Native.dll

    • Size

      503KB

    • MD5

      232371076a23379753eb776cf06fbe5d

    • SHA1

      6a5ea5d44e555ad392725e5ac3d80af0137386e9

    • SHA256

      5940f9d18b9439ecbfcd6edc60563d6f56623d03f09eafa786c436185ef156bb

    • SHA512

      590f67e8455dcfe57795f17c94e6082b54c1feaef81942b1e92efc7905e3e6b6ec7a05eef12a8f0483b5dc1928dc9e7645a74bae31e77f7ac403c64344f09625

    • SSDEEP

      12288:hY/Hjc0/Lf7vjm4GjDL7ROBM1SMzRJTp4g4D:hY/Dc+LDLmVL7QMx9Np4g4D

    Score
    1/10
    behavioral5behavioral6

    • Target

      vmxnet3.sys

    • Size

      1KB

    • MD5

      5343c1a8b203c162a3bf3870d9f50fd4

    • SHA1

      04b5b886c20d88b57eea6d8ff882624a4ac1e51d

    • SHA256

      dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

    • SHA512

      e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949

    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks