Overview

overview

10

Static

static

3

e126c11aec...28.exe

windows7-x64

10

e126c11aec...28.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

BCGCBProRe...T.html

windows7-x64

3

BCGCBProRe...T.html

windows10-2004-x64

3

System.Run...es.dll

windows7-x64

1

System.Run...es.dll

windows10-2004-x64

1

System.Threading.dll

windows7-x64

1

System.Threading.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9b8211d9b222b9534a127855fe14a66021ad4f92f01d6fb87ccc88b944103784

  • Size

    193KB

  • Sample

    241230-3hyl3atpak

  • MD5

    a2df53b0c6882f9460be9090cf18dde8

  • SHA1

    244a8bca3181765c34647c47ab4b5a441f603f27

  • SHA256

    9b8211d9b222b9534a127855fe14a66021ad4f92f01d6fb87ccc88b944103784

  • SHA512

    3717050bc15011c5c06fe0c9841fa5e3889321b0316fa97e61e44cf15efd81fe98c34660985c2f85678122200e6cb60745ad19d007a79d6bc6c96363a441c331

  • SSDEEP

    3072:kckt4VJXA8IQNRiZsEPalk9hRTtoKjlgUMCD9JUUP+Tu1xl7lgB5/Z:FJFPRBu99TtoiOUP+2lxgB5x

Score
10/10
guloaderdiscoverydownloader

Malware Config

Targets

    • Target

      e126c11aec2897bd7959747e70bc85d4153abdadbe45344bb41771ced23f3228

    • Size

      255KB

    • MD5

      a10619d494661c1f8ca180e53c5a11fd

    • SHA1

      1273e17b50d8d33078df02447fa9adaab255b459

    • SHA256

      e126c11aec2897bd7959747e70bc85d4153abdadbe45344bb41771ced23f3228

    • SHA512

      bc1383fa76765e77298ee35d4358bca8b2be7c310d7567f4d93c67790a0f6f03941f1301c11b78bfa5e178dc312ac3d0886417f705e5613f6f732b0b7f23b36a

    • SSDEEP

      3072:EbG7N2kDTHUpou5I/QGAhsCKgUbnVCP/+B9F9EbvwwgMvdOHcgW0SpC7Pn5r0K85:EbE/HUhO0XI9FWuMvG006yPnfTMR

    Score
    10/10
    guloaderdiscoverydownloader

    • Guloader family

      guloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      BCGCBProRes_it-IT.nls

    • Size

      1KB

    • MD5

      5343c1a8b203c162a3bf3870d9f50fd4

    • SHA1

      04b5b886c20d88b57eea6d8ff882624a4ac1e51d

    • SHA256

      dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f

    • SHA512

      e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      System.Runtime.Handles.dll

    • Size

      15KB

    • MD5

      6cfd24edad19285628c42e150b13cefc

    • SHA1

      d2349988d62a8047c8194b5c0a25c525b8b58fcb

    • SHA256

      c702f48311386bb45b4a9189058914197b16b5b5b9606a39b0f4c24ee891f04e

    • SHA512

      1afa531d42d67bca0542063dcfb031f06e4cc923f5addcd5a954aeeba03b29ebc37ebd002f6c2ca9144b56d2e3fad4893c6f3c4c3368d85a5b34f196d1940980

    • SSDEEP

      384:PZ152PIWOmWqlC/uPHRN7yYWF//dJR9ztG/+A:R1zSlWMyYWF//dj9zW

    Score
    1/10
    behavioral7behavioral8

    • Target

      System.Threading.dll

    • Size

      77KB

    • MD5

      514ae47fab14e04e3f7ef70179184f43

    • SHA1

      ba17eea34a75439362c8fb1f12ca438570fbdb77

    • SHA256

      3af3a8b198eadc2120dc9f2cd9ae150ee7be6f3d0c1985519c3c6e652ad25682

    • SHA512

      286acd03edd57b36ee72e76995583042b94c244d8c2337dbd63deb1da36f5a8d04e0db6963ab71b033ec442d3c37cf68701b3e4f0a3933e35b111ce9aa8921a6

    • SSDEEP

      1536:ZFCLZygVO0U5/YrxnU9EqOfxdrJ2RH7AGlUMG:ZyZygVO1exnU9EzxdroKGlUJ

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks