General

  • Target

    JaffaCakes118_65ad6ea66f265da765e99f6c29eff4ca13b0463b1e77285c2501e5df5a32286d

  • Size

    255KB

  • Sample

    241225-c8jbysvqhl

  • MD5

    0480227aba351a789e17dc7481fe9845

  • SHA1

    e913c7b0f82c0ad20ca4db81eba8264a48c9de7d

  • SHA256

    65ad6ea66f265da765e99f6c29eff4ca13b0463b1e77285c2501e5df5a32286d

  • SHA512

    ab3c4944f4061587def35023a76f71c904f60bb73eb7e88f41d7cbb6c034dacf40e8dbf7aed8d65a00ee5778ebb66d459cde93e9120a960c828b1790cf64f831

  • SSDEEP

    6144:J3Z1IRmOIeyMZx3LI33//59yhzXjSUnjFfcvd+:JXPhM7Y/5cTSUZsd+

Malware Config

Targets

    • Target

      e93834f6aafd3afa40912103139f648b18064c5c85b2a4f995dff606d158cd91

    • Size

      299KB

    • MD5

      083db2ba5107452aee57ab26cff7a4fe

    • SHA1

      fc5eaafe57816ebd7fc560b2d66a97323a7fd942

    • SHA256

      e93834f6aafd3afa40912103139f648b18064c5c85b2a4f995dff606d158cd91

    • SHA512

      bd012db0a6467a52513eb5916125622bb111b0dce63679a69e62083c8f6a34113fcaade9ece96a0b0cc7d664078a7649d904218b495a03a1515d9fa6de4be9ff

    • SSDEEP

      6144:bYa6glG2JYtxtI4hitoO1EEl8AbZX/9TLeY9ap4vlno:bYAG2JjUd0t9X/djap21

    • Guloader family

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks