Overview

overview

10

Static

static

3

07b35bc0d7...5b.exe

windows7-x64

10

07b35bc0d7...5b.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4d99dbdd282865eaf0dc3fd76d9eb031a3e1565d6e8e3101da0009262aa16872

  • Size

    154KB

  • Sample

    241223-qnvq5s1kck

  • MD5

    0920cdd96845a859bc318abae66e3ddc

  • SHA1

    f0fb0c6597058840b9e3f468356b49515a495d2c

  • SHA256

    4d99dbdd282865eaf0dc3fd76d9eb031a3e1565d6e8e3101da0009262aa16872

  • SHA512

    85ef1c2365e314bed1df60860fd13ecad3871d92fd4b134f2399eb53e304eb8d077d2ade15929577e5435ff29fb06b26def3914d96ae81f3a372376191f8dda6

  • SSDEEP

    3072:OZsmJ/TGGgyay4fXt9gqsRYPiirtSmNt8smOQxMxMHbU/1XKZyo:OZHH4f9pv94mNGsmCyHqFKZyo

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      07b35bc0d76eebc56cd228b1212d08f693cbefcad6878970b626b0ac1809a55b

    • Size

      269KB

    • MD5

      d2e31c73af82cd670b487cf9bb5daf7f

    • SHA1

      7954c56dc41baff77c51d9b52626fe8bb9298751

    • SHA256

      07b35bc0d76eebc56cd228b1212d08f693cbefcad6878970b626b0ac1809a55b

    • SHA512

      e682bb8137a21956e37594bbd1a20007a9f6938ef56db9be19dea04b8e61584db398a81dbf6c842c24deb705150d4f38403143dff33d38b250aefcfd7abd44e7

    • SSDEEP

      6144:X1ssjw8OeS6xxJUwM5ew23FIgWcU7ipzWKXzY:usketJUB5ew2yuU7iNfE

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Checks QEMU agent file

      Checks presence of QEMU agent, possibly to detect virtualization.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      792b6f86e296d3904285b2bf67ccd7e0

    • SHA1

      966b16f84697552747e0ddd19a4ba8ab5083af31

    • SHA256

      c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917

    • SHA512

      97edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c

    • SSDEEP

      192:rFiQJ771Jt17C8F1A5xjGNNvgFOiLb7lrT/L93:X71Jt48F2eNvgFF/L

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks