General
-
Target
JaffaCakes118_5b2d8544080b589c6c6232ac9d3339a323e93a21849a3834a4c92fab866f4acf
-
Size
124KB
-
Sample
241225-pqacjssqct
-
MD5
ca29275caaeeb671bc1a3351cd642649
-
SHA1
f7c016744a3d869f4abb151b185d4b1fd0347db9
-
SHA256
5b2d8544080b589c6c6232ac9d3339a323e93a21849a3834a4c92fab866f4acf
-
SHA512
8b464445948e2b9246f3ffbf311a392b88f8deae1dce992e1e9aa24dc724c5b560ea1de77ae107a2a942f3630e516aadce45bc8ebdf9e373795bd0ad776d9e6b
-
SSDEEP
3072:ws2nW9sSWnDrDT7iI3FD8jIQDSaYyxLiTjEgRLcP:wrXSOrDT7iI3ABSXULiT4gRwP
Malware Config
Targets
-
-
Target
ekstre.exe
-
Size
451KB
-
MD5
5ec64dde0fa21d026fd3f2aae80d3cfd
-
SHA1
59cdad1ec55c65251aa175452bbea2cd6cf2d280
-
SHA256
f0f6ece4bcfd2bf35aca011e40cfca442bee969a99eb852de791b0065ae5ffe6
-
SHA512
3e0419dd8b5da2e41dd4a11480760a02e955fdffcc988008e072593712ae3f3c95bcdfabe974e0e9c6087f115ba9ffba4d6a6f352f4498e9c8d4994313072f1c
-
SSDEEP
3072:CNRCywDw1DiJkuzL/v1NpooYYYYYYYYYYJ41YYYYYYYYYYHuT5h10OuoUXvsMYkD:CT4DtnjaTuN3kSQrO2TptDr
Score10/10-
Guloader family
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
564bb0373067e1785cba7e4c24aab4bf
-
SHA1
7c9416a01d821b10b2eef97b80899d24014d6fc1
-
SHA256
7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
-
SHA512
22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
-
SSDEEP
192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
Score3/10 -