Overview

overview

10

Static

static

3

HDFJFDFF89869.pdf

windows7-x64

3

HDFJFDFF89869.pdf

windows10-2004-x64

3

MORK095434...DF.exe

windows7-x64

10

MORK095434...DF.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Skottehues...e.html

windows7-x64

3

Skottehues...e.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_938e6fc0fd0e807fbc548f44d0b6e18589e99aea39449ae0bc2e6f5406824b59

  • Size

    162KB

  • Sample

    241223-1frdvsskay

  • MD5

    e9a8a1d71aa66f929261ea856657c750

  • SHA1

    41194ff62607dd01f78807cb25ff5c98b71b3c87

  • SHA256

    938e6fc0fd0e807fbc548f44d0b6e18589e99aea39449ae0bc2e6f5406824b59

  • SHA512

    d75d193593197d82502391727eee6ae1f889a5a81ca92ed46cd01f9f96ff19240966e2de0f58450b41a38288b4694b9b3d1b5ff695419a2eaa76c6f041a80685

  • SSDEEP

    3072:07+2c+AVHYKm1L7YxwVk11bYurPXqZBw5Erd5iPMiD6Ogf:07+X18nTGRrvqZBw5Ex5iPtD6Ogf

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      HDFJFDFF89869.pdf

    • Size

      870B

    • MD5

      c8fef6aa70e440b6762dbc78bba8162b

    • SHA1

      1ce3cccb8bd37db5f1a7115381c9e345f86863aa

    • SHA256

      cf2cbbaf628c5fd91424d79f51931c6721e9cf036404c0b8a75b697f1f9cdd64

    • SHA512

      6b7dafeac57c1a0081b29f958c12f97e3a36c78a6ca6ec6a4eca55f884232e3cab93b34cf42a441624411c14a82a95fb38de4a250de357bbd8b406c317ced85b

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      MORK095434567890.PDF.exe

    • Size

      142KB

    • MD5

      835fbcba74e794db42ef2a52d9155d82

    • SHA1

      99e05046bfd1a9cb6bb2479106a18862623e9bd4

    • SHA256

      0c0df1fa2c8daf189de955db2390ed192692e8d011bf28488e55ed4cc2adbaee

    • SHA512

      f602f8078e36586e4625b992ca6cb7970e9ed1f0daa19fd21e4beb1266d9308a015ad7568806ec6fce57628d5b027e4474ac37ad7206ff6e049a25f719996cd1

    • SSDEEP

      3072:N1T//IHWyWJADJuaXmrbDb+x1IbqKswR4fzcC1osBg7XneldEszWxMF:7//I2y3dX0Db+xU7swKfQYBAneld7d

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      ee260c45e97b62a5e42f17460d406068

    • SHA1

      df35f6300a03c4d3d3bd69752574426296b78695

    • SHA256

      e94a1f7bcd7e0d532b660d0af468eb3321536c3efdca265e61f9ec174b1aef27

    • SHA512

      a98f350d17c9057f33e5847462a87d59cbf2aaeda7f6299b0d49bb455e484ce4660c12d2eb8c4a0d21df523e729222bbd6c820bf25b081bc7478152515b414b3

    • SSDEEP

      192:eF24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol9Sl:h8QIl975eXqlWBrz7YLOl9

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      Skottehues/Hofhold/PSReadline.psm1

    • Size

      1KB

    • MD5

      5343c1a8b203c162a3bf3870d9f50fd4

    • SHA1

      04b5b886c20d88b57eea6d8ff882624a4ac1e51d

    • SHA256

      dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

    • SHA512

      e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949

    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks