General

  • Target
    jaffacakes118_e71cd16e30d4f09ee04ccd1ad8645f29_JaffaCakes118
  • Size 2.1MB
  • Sample260915-vdp55ayvdv
  • SHA256 02d771c18f61dc610582f58c2cf61f6e90f9065fcf96dee0a799de42e3915aa9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AC_III+16Tr-LNG.exe
    • Size 2.1MB
    • SHA256 917e30f0560688d08fb8628aad45c5f7c0eee0a2ec9475a1e74153166c010c78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      游侠网专题导航-游侠网中国单机游戏门户.url
    • Size 186B
    • SHA256 5eb82af4677fbd04c4762b42b9d97504dd9d3665e8437224501147a105113b18
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks