Overview

overview

10

Static

static

3

e1a21cb307...40.exe

windows7-x64

10

e1a21cb307...40.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Endegyldig...in.dll

windows7-x64

1

Endegyldig...in.dll

windows10-2004-x64

1

Endegyldig...-7.dll

windows7-x64

1

Endegyldig...-7.dll

windows10-2004-x64

1

Ravneagtig...0.html

windows7-x64

3

Ravneagtig...0.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a73e3a58ee40d331a22ff7a42221d155126559065108a1da6428fb79e67c887f

  • Size

    314KB

  • Sample

    241223-1wxwksspfs

  • MD5

    400b1caca0b7bbe268371d5fd0f9b1e6

  • SHA1

    33fd5f25525f0b32e8093156e9ad9ee47e269b3d

  • SHA256

    a73e3a58ee40d331a22ff7a42221d155126559065108a1da6428fb79e67c887f

  • SHA512

    70cae2e025a02eba6d09c680f6afa61e072488272b450c795151f8b306b3a962d66554b7ab13da89e1df7ae65b706675546dd7568957d9f6d8e2a51b27129b89

  • SSDEEP

    6144:FPuFxz6OOZQPiGnW75Mw6FyCGy5o2G4lSAbBlTL78vel4VVVroFybg1:FPS6OFP58Aho23l1bvTL78vK4rb4

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      e1a21cb3070236ea19031333fd1e7f05d9423040785d18ddb3ca87b79e446840

    • Size

      433KB

    • MD5

      e6c2d3dac5eb2cf4923ee5bb7145f254

    • SHA1

      8da9460690f441d17e1a1f9a3c9453a29f0b6392

    • SHA256

      e1a21cb3070236ea19031333fd1e7f05d9423040785d18ddb3ca87b79e446840

    • SHA512

      42e3df79a8fc67ec846b8b40b7b0faacc47cb2cba97a684bdadab46e1a9feee0bd5b9664770312d5917c15c3f4b157960eb87062a7ad47ff32914df7eccb2ffc

    • SSDEEP

      6144:fUj/wo75BKtzLEhmNPrkB+/QRdJW57Zz7qTnjLUCxSaI+qHUP9Qgm3sYHwoJbR05:fqNMEh6PdfXzanHUkBsH6QH9QoJdpo

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      a4dd044bcd94e9b3370ccf095b31f896

    • SHA1

      17c78201323ab2095bc53184aa8267c9187d5173

    • SHA256

      2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc

    • SHA512

      87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a

    • SSDEEP

      192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      Endegyldighed/ingemanns/VirtualDrivePlugin.dll

    • Size

      171KB

    • MD5

      58191dc480408e1da04efa28a574d4e2

    • SHA1

      e860300e6bd68da86cc3760c5d598f9aaf2e5f70

    • SHA256

      45298d418f62ff78dc1a8319eed11e040ceb387a6e3d28105a475217a5ae011c

    • SHA512

      913bbfe3c0382221fb74b25b807d391d1e51eb234c96dfbc0151a73a9931fb5ec6bc5d0fb90e7127faafbc92a1b10c04f4af9831db2d78e8e1a4c322f70aabe5

    • SSDEEP

      3072:QoIzT0RZbPnVNabCBXGtUuRaFOu6Ct9KvapdJ1sFa98N0Su:QoIzT0nPVNac7uRaFOJCt9Kvap7ca9gS

    Score
    1/10
    behavioral5behavioral6

    • Target

      Endegyldighed/ingemanns/libffi-7.dll

    • Size

      29KB

    • MD5

      43c639b6ba8415f94b8fc27a96042650

    • SHA1

      07ed717e5032f2025f759ef484fc25178922768c

    • SHA256

      d07afee9199e6cbf406f7e6a7f9673296bda5244e5ca79a37177226f12801d35

    • SHA512

      eeadc1f19a633ab2b05c4466de6d35cfb7c76a731d8ac23e5cbf7005ed905874c43bfc6f5da9aeeab66aad00584862df691e7ae8e5da805ee1d9608cb6663b0d

    • SSDEEP

      384:PC9/Hckzur4W7phM9EsXbD37e9t8TlfJJD+QiUZ5ZqtIsNYF5VYJO0mnwrRCXWxU:q9UkeXMNXbD37e9LUZfqtkLVYJXuWc

    Score
    1/10
    behavioral7behavioral8

    • Target

      Ravneagtigt/Sudder/libxml2-2.0.typelib

    • Size

      1KB

    • MD5

      5343c1a8b203c162a3bf3870d9f50fd4

    • SHA1

      04b5b886c20d88b57eea6d8ff882624a4ac1e51d

    • SHA256

      dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

    • SHA512

      e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks