Overview

overview

10

Static

static

3

ce519c88c4...15.exe

windows7-x64

10

ce519c88c4...15.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

PangoCairo-1.0.html

windows7-x64

3

PangoCairo-1.0.html

windows10-2004-x64

3

libpixbufl...ff.dll

windows7-x64

1

libpixbufl...ff.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_52a461a0646830e5265c1ab62c933de6889f0bcd5ffced4f654b92495e982d4e

  • Size

    237KB

  • Sample

    241224-yl922swkfk

  • MD5

    416a74bb4288e01fca8c3c123c36f9ff

  • SHA1

    2ff99b90bad91a0c81c90337cf1d5a6d9ac3a50d

  • SHA256

    52a461a0646830e5265c1ab62c933de6889f0bcd5ffced4f654b92495e982d4e

  • SHA512

    390af7c4537c44ad9fe14feb5bd8c2eb4bbb6c5c8e4bf29991564dd4edcf3cbe883f1798994a54c61d652073bed692e77f8654c42116fac4f94b3459e2072541

  • SSDEEP

    6144:z4pXupHVm6EQ+dhXVj/nq5PtP4cTj+xFAvqRx2:z4UpUXV+5Pxp+nc

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      ce519c88c449ba56306326bae15307bb0977e355207d57c013b8fe1ff2a0a115

    • Size

      345KB

    • MD5

      8fb7e4b49fc7aac5d90fe5d9a79e059d

    • SHA1

      1e950ba32a1445db7e57d1d933d9fcbd3664a2ad

    • SHA256

      ce519c88c449ba56306326bae15307bb0977e355207d57c013b8fe1ff2a0a115

    • SHA512

      6048871d0a17b34cabbdf72d639208b90b4d54020b9e761e32a4063ca782cc910127e656f64c7bc0efd557e367108628dc536ef6c8d4e2d11d7824075f2e8a07

    • SSDEEP

      6144:BbE/HU7hZwSGv3o5OyG4q+ETeuAShYvmy4Bob6XuCBF:BbJZjGVeETeuASCe9Bw6eCb

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      PangoCairo-1.0.typelib

    • Size

      1KB

    • MD5

      5343c1a8b203c162a3bf3870d9f50fd4

    • SHA1

      04b5b886c20d88b57eea6d8ff882624a4ac1e51d

    • SHA256

      dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

    • SHA512

      e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      libpixbufloader-tiff.dll

    • Size

      27KB

    • MD5

      9174157f50762dd5d6e160c7e0ddadf1

    • SHA1

      d9e0ba6aa58b561d25c5a122a842a7b5de1d47a4

    • SHA256

      80495e26f7ace00dde275b5c96292c7c31af65ac7732d42d4e626ede68f8c7f8

    • SHA512

      9a8a32b1a6648cfffe2ee44dfc8bd95500738766ac14f13d967006df35745fcab18c7d4cb67eeea2eac0a2fcc343b2d670b20a67960589236300e522ec20144a

    • SSDEEP

      384:iRGqs9qVGO2LHItNcLIHJOJF9yX8EzQrwEI6/p9ekFCCq:iu9qk3o0LIHJ4LycFFq

    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks